{"report_id":"05161757-46c7-4071-898e-f015f8fc1f7d","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-02-25T17:48:27Z","url":{"schema":"http","addr":"changebit.org","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"changebit.org/","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"title":"ChangeBit - Instant Cryptocurrency Exchange | Swap BTC, ETH, USDT \u0026 More","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T12:49:21.261727Z","times_seen":17742684,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"changebit.org","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T17:48:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"cdn.simpleicons.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-02-04","domain_rank":3051679,"first_seen":"2022-10-26T04:03:48Z","last_seen":"2026-02-18T21:33:57.310076Z","alert_count":0,"request_count":18,"received_data":38848,"sent_data":7930,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-02-23T06:27:16.921756Z","alert_count":0,"request_count":14,"received_data":149397,"sent_data":6617,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"assets.coingecko.com","ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":509273,"first_seen":"2017-10-11T16:24:34Z","last_seen":"2026-02-23T15:36:40.354423Z","alert_count":0,"request_count":22,"received_data":51834,"sent_data":10280,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":4,"received_data":100944,"sent_data":2176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":10795,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"changebit.org","ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-25T01:57:16.245651Z","last_seen":"2026-02-25T01:57:16.245651Z","alert_count":36,"request_count":18,"received_data":7419456,"sent_data":7778,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"changebit.org/","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab4233bddfaf79a3843fe47e658f0dbc","sha1":"eee4e04ae35ab9ad418b7f5f017c1609b75f11b7","sha256":"737b6a95fc7679e6c7bdef3cbc80f83463a6010ac8489d51e0052d81f33bed9b","sha512":"29d5c7e299d3f03ddd1d92fc10f2817b35a11c29134b7af53772f4b694ccc1434724d7f6b59f1664f82f454ffec36810adf4b085e42287b1289cfa855a6b71dd","ssdeep":"","tlshash":"a6d022be7109212308b219bba069dae4ba3b312186280200e90e8c6068a6c6a5710ede","size":211,"data":"","first_seen":"2026-02-25T01:57:21.521539Z","last_seen":"2026-02-25T17:48:30.33078Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/scripts/w-modal.js","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-03T21:00:55.072731Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/scripts/w-loader.js","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-03T21:00:55.094799Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.simpleicons.org/phonepe/5F259F","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /phonepe/5F259F HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 612\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPNG79Y7TFKHESADGV0J-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QwCuL%2FtJfH7U%2BGlaeb0hggJgIOx8cIlg%2B8Y2kYDCixg52fWtZuMKha4%2F%2Bnw5hdZIIgnyerSVcsNmpTZ8jG3shgQ1F8pDZM5yMNukUOVktlZHaEg%3D\"}]}\r\ncf-ray: 9d390811b8d9c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":754,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ec280aa7e8e6007f4836fe5af20352d","sha1":"03bb8b497dcbb8894c2405d8fcddc2521be8d80d","sha256":"b907601a045ccc897beb728ca657c9c44e83b3d8ebb4d19593a805a07296bdda","sha512":"62164be8cf5f85a12837cffa54b53f55d1da3f08d3268f5ee3b0b12c6c8563768c6a980eecd6d9643276f1fb125003396b4e20e1ab1e53123c0184cb3d3ea565","ssdeep":"","tlshash":"4b0195f8ea84e5e94524e79c5f7b631620ff1175096fc119498d0f48c18fd9cf994c50","first_seen":"2026-02-25T01:57:21.375224Z","last_seen":"2026-07-20T15:47:02.814249Z","times_seen":4,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/f/ff/Ziraat_Bankas%C4%B1_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/f/ff/Ziraat_Bankas%C4%B1_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\nserver: ATS/9.2.11\r\netag: W/478dad164a35d04483faa44ef0be073a\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: hzwtkvt4xr4lu5tzypixnma9wp1mwks\r\nlast-modified: Sun, 24 Jul 2022 19:34:46 GMT\r\ncontent-encoding: gzip\r\nage: 0\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=EF2UfRx85uXq9Cv1X3dUEQMSAAAAAFvd6QPzCyrgzTjK4Fyp0rT3b583_bk7ZyS7;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\ncontent-length: 7028\r\nx-request-id: 795da335-cad7-4c7d-a58e-c6dc1c28ed1b\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":28690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"478dad164a35d04483faa44ef0be073a","sha1":"9a12e9a3fc247971d59165099df940604648336c","sha256":"b60d944bc9640dcd1383c5d8f0ad6c2816b8661865120e48c93f5f4abf897cb7","sha512":"c6e3770c86b6739fc20401fcfb6408dc82f79b9ef931598bc7b3655bbf7051aab660773c6d4f17ea0e1f9526f48c303f73e5f0acacf49b5e969f34c3c700663a","ssdeep":"192:L2yK/XhEwZyBhmTTkT8THIpSPoZtu9F3omGaS8drFmh65DShnDb4pJK3iEU71g0S:7aXeyyqPHA65mpbgJP1g3zcJq+cBCa","tlshash":"ead230b21694492ba271c788cbc4145dfa1d9593f5a2a1d0f7aff54b5f328fb40bea00","first_seen":"2025-06-18T11:37:15.70808Z","last_seen":"2026-02-25T17:48:30.220373Z","times_seen":5,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/0/0c/Mbank_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/0/0c/Mbank_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 16u2hs96hzow4kmskjhb1v2zs58y4f3\r\nlast-modified: Sun, 19 Oct 2025 11:41:59 GMT\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\nserver: envoy\r\netag: W/63fc85b86efa248640627e2d880f057f\r\ncontent-encoding: gzip\r\nage: 0\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=Bz_Vus2iZxUkudXxLT-5_wMSAAAAAFvdGO04unOb-mge0M07TUmWf26Q4DBeg0WF;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\nx-request-id: fea6fded-e41d-4aff-a5eb-912ec9810213\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1781,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63fc85b86efa248640627e2d880f057f","sha1":"0a2fae70e597538a801daf87283fc27744e106df","sha256":"ed7937beab87098a5ef533a72c66cd9253d5ea010104fe2b46fb950dbc7c0501","sha512":"d2471804590bf547f0de4ae57d987e40541f7985235a3d414775d491da79fcfe306ecfe13e16a743637306c45a75f83f1d227a2472adad2e55fdb972de8d00f0","ssdeep":"","tlshash":"7c3143f9173c656c486a4ba4ee7b75c2638c92fd75e080a4e7489930b923eed7c42c50","first_seen":"2026-02-25T01:57:21.484036Z","last_seen":"2026-02-25T17:48:30.224005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/4128/small/solana.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/4128/small/solana.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1430\r\ncf-ray: 9d3908112c918deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2225\r\ncontent-disposition: inline; filename=\"solana.webp\"\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\nvary: Accept\r\netag: \"9f6644b0f146e9c7cad0c5b20b506082\"\r\nx-amz-id-2: zrJQrzWK6TXupd8NPzGdeO09QgAXyu1fVYwPt17gvAoKK1cWMwQAu8RZJ9ovFNQHqf1CRit1iWA=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 8J611MVZBGQM8TF5\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cnRoe6CaxjUACi2X2EWAhiEsPtVd4cYj\r\ncf-cache-status: HIT\r\nage: 596541\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"caaae432aba5384b131797a8f9386fe7","sha1":"5594ebc7f633811ab3332d53e7dfd94d9c81a4e8","sha256":"c261f5492b11374ae6a6cfba49718ec139f562122bb4ff534cb4f7abb24d7f42","sha512":"182eff64777b491674afb9134591a1ec4ef187e4385624c80f5fe346daa84aee85e335b93187d2618d5c4b523c40d9fb9cd474d869ff1f70bb1d0e4837610ada","ssdeep":"","tlshash":"f321e6141ac6d88a86fab1a58a608587d47c34ec870cc931c0d2b14a33b044fdfc8b9e","first_seen":"2025-08-06T14:01:03.720041Z","last_seen":"2026-07-28T16:50:05.724281Z","times_seen":81,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/44/small/xrp-symbol-white-128.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/44/small/xrp-symbol-white-128.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 594\r\ncf-ray: 9d3908115d538deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1492\r\ncontent-disposition: inline; filename=\"xrp-symbol-white-128.webp\"\r\nlast-modified: Thu, 19 Nov 2020 09:38:53 GMT\r\nvary: Accept\r\netag: \"1ed36d280916ecfaa451eafeb7dc83e0\"\r\nx-amz-id-2: 006ltAVJOkrI9ckJAO1Gd44mJRZ4AAS7bB5Tx3TI94mbcpqEWBUFk6EUHpWqFBLH+Zdl0Wsedck=\r\nx-amz-request-id: HDV9B5CKZP8TJHR5\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 1063860\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8eabefbd64e3b57ad8670c177e05c396","sha1":"4f08e1d6a7792ef4efab13f4f6f6f0122ddd80fd","sha256":"6406a6617381988eef31d9a9fc1d2cef14e1ebf167c71384a9840fc6bf658e17","sha512":"cb9467afaf05dbd9e9848688c833ae9b0af19bdc21c5c398defe5faace98dd962b1383fc18059248c50e7077f0af63ca7a24456ea72c775037af3edf6bd66f72","ssdeep":"","tlshash":"a7f002b09273e52af430893845979d4a4c3fe14a04935d17cfa519f38498054e965a6b","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-02-25T17:48:30.228997Z","times_seen":39,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/sepa/2350A9","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /sepa/2350A9 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1573\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEP7MDRJRPAS5727NG7J8-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2V9wtw7JxDXQTNgHM3jW1NK1E3HgEq3R%2FT0dY3J5p%2BAguo7%2FX1CTnFhVzRDoXuSue3zVkEfyjqqAferIaMK%2BYVGCKxl8cGRj7yQsrHb6AcrTAo%3D\"}]}\r\ncf-ray: 9d390811b8e3c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":1951,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3a7c936d0bd901db629f98c6d7f3286","sha1":"1aae69a04767c2997edf294b15e9bd90fdc32c94","sha256":"6fd5380fa76371e0240b5370ce436b318c8595706c29f1cb374645b6378ab719","sha512":"ce6b9a84a35f5f716622fe4c07e4d8cab73d909e10d24d62d6883d509e5497f12832f90d324691d74fd796925d94ac7831c5d1f4abf8723a513ed7b133b3c8c8","ssdeep":"","tlshash":"f44153c552a487ccd885e51e9f72eec8130e90aaf965adc58e9fcb1d254f9c0fa0a840","first_seen":"2026-02-25T01:57:21.425816Z","last_seen":"2026-02-25T17:48:30.23026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/wise/9FE870","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /wise/9FE870 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 262\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJ8AEET8FY478WDHFA67VYV3-arn\r\nage: 88279\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 24 Feb 2026 17:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yd75L%2BuizHgkjghVSWoW3yKLy3JPH21kehZUQGm8UIB6FCJQEaeIJalR7ap6SRb5cvxyPq9JwiVg9zkuo7uK6MHRxt2i%2BZJPwL0Qr9QYaFhzmGw%3D\"}]}\r\ncf-ray: 9d390811b8e8c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8fd5ef07d1757cfef42370071912debc","sha1":"d6f2825f958584e2020e878a4610938022297877","sha256":"882842c0a729e633e84fff24bf9edecec8216b8bf0b47f866e32f82d41fb6c18","sha512":"cb7e803c864517e87e548a7be6ee906c1b69909dfc3fc262e61fd30695e3ef0b69df303cdc6773f28a6dc8bba3b26ae8dfee480f6948b788b158eefe0456582c","ssdeep":"","tlshash":"ead0950f979c585440a4ca3077fc35c76579584d50c0c07decc3038024461e19d4c5f9","first_seen":"2026-02-25T01:57:21.494176Z","last_seen":"2026-05-15T16:50:29.014884Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/venmo/3D95CE","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /venmo/3D95CE HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1125\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPCQE21MC50ZNKS3JR9F-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnLL3STyWSo1ELTF4S5R%2Fgwqi8VHCKNNOG7krsiuyfFhj3trWmBq%2FLaJZa50qL0DD%2B67B2WMee3i11C4qpwf2RD2r%2FakmzkWAO%2B0U8vXNC4J0WY%3D\"}]}\r\ncf-ray: 9d390811b8f3c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1504,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb7da3471422faedbfba40e3e4f7d614","sha1":"f6c38d40b9b09ecb82d6a2c1a84a365200c520a4","sha256":"f66e48e9a6502bd4abba939268f4170f066990a478062b0579c1ac9847b9c7f0","sha512":"a729bfd358cbc65174f5d0c6a0cf0e4789b2a8517eed150a12d9230ba9af9992c94b4d8f246d9b68fa231ebb75a82cbd43fbaee451025d4a466111edfa7eaffb","ssdeep":"","tlshash":"69311fc51754fb6c58a5fa6abf90ad85304be09ac875c696469bcf1c8907eccb605810","first_seen":"2026-02-25T01:57:21.413836Z","last_seen":"2026-02-25T17:48:30.237215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYE98RWq7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:05.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYE98RWq7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://changebit.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15832\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 16:11:41 GMT\r\nexpires: Thu, 25 Feb 2027 16:11:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 5784\r\nlast-modified: Wed, 25 Jun 2025 16:58:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15832,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15832, version 1.0","md5":"22937a2ab67d7802b0de32a4e7e3c733","sha1":"68c6b8516d7b7c9d3aa68bd506419d2c656e3a71","sha256":"44ad50c760fa8f5b62da3d489edb40adebabaf97988b9b0adbbc3f0be859050a","sha512":"d74e3370c0b6eb316468b198618270b782240606e06f4d7baab100131fb2c2da70fd64fd449c5e14b8d0f5878e9202182cf1efdd491f37936f0c47d6f4e3005c","ssdeep":"384:VWcW9KlUOQIRyTIDZLWJgkyQOGEMr+K+j+DHwlH/lUe8:VWD9AULca6zQOGEw+KVTsy","tlshash":"5862c186ae6240c08928f87865e63dafe75e983b5f9d715df9205b4fabd3d83c048043","first_seen":"2025-03-08T19:23:28.34372Z","last_seen":"2026-08-06T08:11:35.221154Z","times_seen":1028,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":78,"dns":1,"connect":39,"send":0,"wait":12,"receive":4,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026family=Space+Mono:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026family=Space+Mono:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 25 Feb 2026 17:48:05 GMT\r\ndate: Wed, 25 Feb 2026 17:48:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10109,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8803b6e9a6a15b93bfa17aee0916456d","sha1":"aaf0aec81aeb7c7cbdf87a5b3e7446c8e9e5e01b","sha256":"9d831b5221a4cb5b4013b3885d8c9040f920b424060dd16633c4419781ad914e","sha512":"ba20cb06652b5959638943d46a5b76bb34097fa23e7e76f32252f82e8e6af005912072ada0fa871f5fa94d4aa1f5825e85489d1440242382b48376cf835e7661","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlqV6FY7sbBxx:vXuM0pKbe","tlshash":"6422ab92002ba400ab971dc233cf7f3aae8e60896085d1796ffd0cc59cead66536875d","first_seen":"2026-02-15T20:11:17.128833Z","last_seen":"2026-05-29T22:11:04.453718Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1295,"timings":{"blocked":610,"dns":0,"connect":7,"send":0,"wait":32,"receive":0,"ssl":642},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/69/small/monero_logo.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/69/small/monero_logo.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 906\r\ncf-ray: 9d3908112c898deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1795\r\ncontent-disposition: inline; filename=\"monero_logo.webp\"\r\nlast-modified: Thu, 08 Nov 2018 02:20:59 GMT\r\nvary: Accept\r\netag: \"659e8197e27656370d9a92cd43c60491\"\r\nx-amz-id-2: kVgRKXf0HcBiROQ1Jsu828DOxhxmX85BM5cxha+IVMbzCbBEaNZH/qefRC0NuzODOeOpBtFllkk=\r\nx-amz-request-id: 37D62Q06V26M1T74\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 328587\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"433ed3727f6d81449cc88ded6cca0e30","sha1":"84ad98a23f1f08a87333bf77a462699e3a9e951d","sha256":"8ed3d44e3a19722c8ad9cab1bae335fc5a6bf1a696a7eb54084517c5d29eaa01","sha512":"6383913c6bdac4f9826ea9803c301f0f446385c8654797a1f99f4dafa867e1a0b7c0fda71c202f9861c3e564e5d84343f766cfb7de4115ad184e32f355a3b0f1","ssdeep":"","tlshash":"c711b73c27a7790748b5fd35b03497518b344dc1a896088473e3eb255613c1ca7122fe","first_seen":"2025-12-28T19:01:59.318677Z","last_seen":"2026-03-08T23:02:04.26302Z","times_seen":4,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/10365/small/near.jpg","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/10365/small/near.jpg HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1684\r\ncf-ray: 9d3908119e908deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: status=not_needed\r\nlast-modified: Mon, 08 May 2023 03:06:02 GMT\r\netag: \"b6be00b63dc8a7fbaaf4cb1de088449b\"\r\nx-amz-id-2: weczRB3CMBmodLpJ30LD37W1Dv/ASz+pbtxYkF/l5IUhApm4hSXGzqj1xspXAdooodKwei3LSrY=\r\nx-amz-request-id: 1YSJ1C4GG7256HYE\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: fgTSvDuKQ2FUOwhAOWxbaFobeB.yAhhs\r\ncf-cache-status: HIT\r\nage: 57072\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3","md5":"b6be00b63dc8a7fbaaf4cb1de088449b","sha1":"f52a6f6c9d8d05528dcad25fc05256089c0e220e","sha256":"bfe61b151fea26803fb0ffb7e93dc667c044ace6bc9b1bb061efa1adb4f95245","sha512":"2db73b85cc0b76c82a1c038e51d0b8ff2e39cf587407cf95a2d8929973bfad0c6791c65cb129bff898ade5e4d0e913c56343ed6d5d7b9ca5ed3046adc35a876d","ssdeep":"","tlshash":"3c31c6a15bad171dfe22967525d04fd1dbb77f32a9cf571e8642009d78548c04e2834a","first_seen":"2025-03-05T22:50:33.621916Z","last_seen":"2026-07-28T16:50:05.709157Z","times_seen":16,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/icons/ach.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/ach.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJ%2FnYNowxuwCWecIyIjQNBjVnt7jdBiP0S6RoOVQDoeocMwFVsgE4ZTixCziUD11aHd27N6hcMd4OuJXUgYz2fEiOO0CE4L0l5DcvUI%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21163\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-1b3\"\r\ncf-ray: 9d3908110d780cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2068de889812a54fb797c708ee42f8b0","sha1":"5da89fdf78f1695e7bf905d6408beb167854ea26","sha256":"774c931c0823ab7cae38e7bd57c98bb796aed996f0a7a4700e3555b457d087a4","sha512":"8420781ce068c7a138b8c67238c4d9c51a047465fba6f96a28ceda2b8254c4a20f635f0cacfa6c538d24a13818da4377f6964aa1c911473100bebd19f4aa31e4","ssdeep":"","tlshash":"ebe0c066f15c990cd600170d2728649a31b7b1caeb1d0104f988397b945aadbacb66ee","first_seen":"2026-02-25T01:57:21.423133Z","last_seen":"2026-02-25T17:48:30.243332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/revolut/0666EB","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /revolut/0666EB HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 453\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPGXVYREMAJ9HPY6W8C3-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9yzlLFc1Zv9poRUVrS1%2Br0aWlXeJbmVZrpmyoRdG%2BhsADClpY1gJfePFVCaAXQEGlwhxpn6agjgsi5z3L1F1aE8O%2FC%2BOIO2MClNQtyDUQew7fY%3D\"}]}\r\ncf-ray: 9d390811b902c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ad6fd337565f4d064b3cbb5d174dc50","sha1":"b7f893ec74c100d988b0d163ce8f5f9f23d73cd8","sha256":"8e32950437baa6e871b728213513dcdb60e3e854010a6dfe872e7ddd57d95954","sha512":"a4ac04c2d28b389d412f39322254a1f801de560e45b2b16a9451bccd806e4f8d6b59151ea6556b61fac1f095969e1f17fd4e7be585826ca08312ceccf64e8bb0","ssdeep":"","tlshash":"59f0dc9992a82a8ddf0ccbecb97c2a5de38d509db0d802e9e4cb11086046ef15c59158","first_seen":"2026-02-25T01:57:21.457383Z","last_seen":"2026-03-28T06:25:08.282201Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/a/ad/IDEAL_%28Bezahlsystem%29_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/a/ad/IDEAL_%28Bezahlsystem%29_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 03:38:16 GMT\r\nserver: ATS/9.2.11\r\netag: W/a95abf7d86e60be40cba054cf5270e80\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: mnw6pqi8k81zdbuwl815rme5ho79le5\r\nlast-modified: Sat, 05 Oct 2019 03:51:40 GMT\r\ncontent-encoding: gzip\r\nage: 50988\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/274\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=bqenO42vfGk1nCZK75u9ZQMSAAAAAFvd9b_3xSdrJFepMniAFx6vbJ9t5_GYaMfy;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\ncontent-length: 1299\r\nx-request-id: 0193c37e-1741-4254-ac89-a59de8c2b8e4\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":2551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a95abf7d86e60be40cba054cf5270e80","sha1":"c2052c1f92d43ae6dafc42c663916e36dad6eb8d","sha256":"463ead4490c3123627caf9ba037e1595992d16c1bb9714af0e437c82f3ba4077","sha512":"6471e0399297584d7b376931e15b11e105bd4d49b0a7570f501af044ce3ef70bd43c797c34c0b4420660bc8967818821742db1c9a867de555603f11b5e4bab07","ssdeep":"","tlshash":"5e51b759d31a16f8e15c0f945cbc141d2f255ceb330242b5e5aa08e0bf22fbe1b88a9d","first_seen":"2025-01-05T11:48:43.929523Z","last_seen":"2026-07-09T09:01:53.980663Z","times_seen":25,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/icons/abank.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/abank.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbdVX%2F48zW9oR1URzCcgR0GBxLuoxgNFHf4ffy7Sv5fKUdPizJQ5C%2B2VWX1SVRSJfDFvhXiaPlpCQgvo7h4Gz3Kz%2BOJvnihQalAlXUE%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-11b\"\r\ncf-ray: 9d3908111d8d0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a36e199764f4df88045fb57cdfc0328","sha1":"274aadfa29f8f4c4d95fbdbc931da5779c7f7e73","sha256":"2af72500c25e9fd4d88a866d9a0294cbbaf6f9be6c64bca59602e66b184b4012","sha512":"57d1fdfba328e2c6f61ab488c785c8cdc8c8baaf01bee80d1226aefa7be90a96d2a339dfd45d022129aec01a789e32af7a7a5aaabb9a2a6425b125b695b9f3cd","ssdeep":"","tlshash":"21d0cd5580d85a0cc6044909571f7099749995c58645891df6915a431885457259d3dc","first_seen":"2026-02-25T01:57:21.415594Z","last_seen":"2026-02-25T17:48:30.2518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/f/fd/Garanti_BBVA_2019.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/f/fd/Garanti_BBVA_2019.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 5dtq56n4fhhu631a2e61kx7a4a8to1v\r\nlast-modified: Tue, 01 Oct 2019 10:01:40 GMT\r\ndate: Tue, 24 Feb 2026 23:48:07 GMT\r\nserver: envoy\r\netag: W/31ec0f8afb124d59e557f4b274571b9c\r\ncontent-encoding: gzip\r\nage: 64797\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=wbHXeWnFr0rxDLOFTq1HRAMSAAAAAFvdaEYGd_lr1oCu5013y34kj90CR5AY_yMO;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\nx-request-id: 435ae5e5-5428-41eb-b802-c5133ee13a6f\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":32952,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31ec0f8afb124d59e557f4b274571b9c","sha1":"2e1786b96917cd2cb042a5ce7687e307c6824f03","sha256":"227a7913aff14831f4a5e393c3b7b2ba09cd83d29bd4efaa272ae7c73503d47a","sha512":"0e634bddb0f60219530d6e4923eda857af67b1a9417621f138bd3116dbc89f007bbcfeba57099f8ce33c1218bcf11b03821733ab935e40345a10eb99c88aedd8","ssdeep":"768:qqdBx3ULrgqyUA6pmod/OIm8NtsgDtRXPoCihwBHK:qqdBGHg6pmod/1NArS4","tlshash":"4ae29f76035e2eee6aea0254822621833fed54f7d164a2d8f7b75c72f04edb08964934","first_seen":"2026-02-25T01:57:21.43078Z","last_seen":"2026-02-25T17:48:30.253351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/1094/small/tron-logo.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/1094/small/tron-logo.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1062\r\ncf-ray: 9d3908115d5d8deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2279\r\ncontent-disposition: inline; filename=\"tron-logo.webp\"\r\nlast-modified: Mon, 11 Jun 2018 09:35:18 GMT\r\nvary: Accept\r\netag: \"ea60ede82147e3f806ac55350af285b8\"\r\nx-amz-id-2: vLEPPyvfmRMyuaA3NEPcoB9QrMJcoDAuLNhP1jIwILRpAw/MAZTLDATqaWdmtzuOlPkvwM5SJcY=\r\nx-amz-request-id: 3SQ276GBKFEZ0HYM\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 594905\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1062,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b5236af7a2729f054be4fdd0300331d5","sha1":"2912ae59ccf93f5f6e77f4da5bee340015a0434d","sha256":"9b48fc4a651607fc08c6d004e635c77d695b14f4393498816fa6d4da1eba4676","sha512":"df555644ffe3dad540cb1d8eb6c148127b12d5478221e7e12b4636b7c1ee3834260c9b9a076e7282ac130f01e461bb6c8f12e8256ecdc163910c45371dafe6a3","ssdeep":"","tlshash":"0f11b97a3be0af75d8a8e6c0c6ec76d304c311d557b6e088f55d8c29644caac10c54f9","first_seen":"2023-05-27T09:03:31Z","last_seen":"2026-07-15T20:12:11.606364Z","times_seen":16,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/2/23/PKO_Bank_Polski_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/2/23/PKO_Bank_Polski_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: o83n6t21w37drjytyvi8p1y4zs4inoi\r\nlast-modified: Sun, 19 Oct 2025 12:14:20 GMT\r\ndate: Wed, 25 Feb 2026 15:06:35 GMT\r\nserver: envoy\r\netag: W/96e7878f4d89620fad3afc8a9fd0e736\r\ncontent-encoding: gzip\r\nage: 9688\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 hit/1\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=60kVChISzC9Xe1H3d83zcQMSAAAAAFvdZ-ET7CPwD2hg5-dioLk9Oem2KbAZf0Hs;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\ncontent-length: 1566\r\nx-request-id: b3b7ad0e-284a-465f-b9b8-1ce9a41e3c23\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96e7878f4d89620fad3afc8a9fd0e736","sha1":"cf62e5070d038fd1afbe95fe3ef090894c4bec62","sha256":"a453f1b95d5335a40e0b5624fb64cccb6ca58d9f8cd0206f6e29a6962f700e2f","sha512":"2ac6a5e855382e113d58a6d25add76e0460c0df6a634446afe13996cbadd373e765d4bb22d893e9fbbe41edd22adc62c03020b462ddcc7fd6f032593ee68a201","ssdeep":"","tlshash":"a271ab3e8345c2baecaecebcee6754b5e04d90de90d6c3568399ca7016e20cdf60d954","first_seen":"2026-02-25T01:57:21.486119Z","last_seen":"2026-02-25T17:48:30.25624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/icons/bog.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/bog.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BmHMsO%2Fs9jFlcSNJpZG70PERzaJ6bFvprnHntNnkUvLkItH6alrLs5as0TuRgUPtNK2OHESpJph2m5KLqeR70trRyTBcnM9JL9lqDY%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-169\"\r\ncf-ray: 9d3908115da80cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9aae7ed9f2baa06ce747ab07bfb4c397","sha1":"3c1b3089d3d35bf52aa9afdd704803030b05b015","sha256":"fb0b597b653ef6e99b1edbb901dfd41ae724de025e3185e02720ea7a2d8bf141","sha512":"353048940ad0de538a91b5da221c98fc5c0801eb4bdddada8546b87409bdf91c70a448043aa77918929cb9d944155e45fcfdb67a66cb95bc9fff328c3d2360eb","ssdeep":"","tlshash":"1fe0c07ee36d954c9505463c073654f2c02b71ac52c40311e58cf42435149977c6b1de","first_seen":"2026-02-25T01:57:21.467561Z","last_seen":"2026-02-25T17:48:30.257694Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"changebit.org/icons/tbc.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/tbc.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GfC0VboLG2ogWnVIaUbP3no13Lk9SHx7Pcyfqu4q%2FdgCimsy46BykYcDjwTMs3UYBVm92KCv8EvSH8XJLoTZBemV4KVvj5qx%2BAKbNZo%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-110\"\r\ncf-ray: 9d3908115dab0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c684d38a37cfa937d930a577711c4d78","sha1":"529f8ecd1f9014add22ce500f649d5b3b1b71e1c","sha256":"28e267d51354667930521e0df1e8540e86e9d9f53cc9b6586cbb22234072bb1c","sha512":"c3be8d02517b78b2f76dd51c218724297f5e8ced81e7408314f954a37698bb9f76f4f3e70fde2dd2339ad3bf1a153780ac97df1beb396804a02bde9d1e83a381","ssdeep":"","tlshash":"a6d0c21180dc8a0cca048919672f3069246ba9d8968a8b6db681141258c58a7268939d","first_seen":"2026-02-25T01:57:21.405396Z","last_seen":"2026-02-25T17:48:30.258931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"changebit.org/icons/imps.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/imps.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FJ%2Fq1NTdvdGjIivF4I1MwwlgdYg2IixN0%2BaHtiiZv2CDfdSZWIXnzvUNfXWrfex6aBbo1UgxT0NELmsEdQNxYPKeRzC%2FrItbzkDcuU%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-1e3\"\r\ncf-ray: 9d3908115dad0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac77c11528ec28deb814cdb7763fe45b","sha1":"04214505f0028369751b0dbe55166a138cc0dacf","sha256":"226cc824e4c6229e57b9d31ca94fad78ad4adf58da0fc66a40ff1208718f2cce","sha512":"f1cb0828a9b3410b1e5305954611d35dba3f3702d554caff23de7079c1e242f87e7f40c081ddb77dee828aaa0b8eebb7cdf33c49bf2529c140dd68bf4ea6db74","ssdeep":"","tlshash":"0ff0d441d34c4d3ce7200d05d33c70b4203bf9cadb094614b850613514995af5d7b7cc","first_seen":"2026-02-25T01:57:21.488166Z","last_seen":"2026-02-25T17:48:30.260091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/2/25/Abu_Dhabi_Commercial_Bank_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/2/25/Abu_Dhabi_Commercial_Bank_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: sse5r6pspqzf4z9sq8uoi620kbo1wmb\r\nlast-modified: Wed, 21 Sep 2022 17:24:57 GMT\r\ndate: Tue, 24 Feb 2026 23:48:07 GMT\r\nserver: envoy\r\netag: W/ad6b9c09ca47fa5578aa46990ef9bce3\r\ncontent-encoding: gzip\r\nage: 64797\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=Vp01c4f5XsykOgHNsWvKqQMSAAAAAFvdgqmG3h2RHIcJKgjyBmwcmcCjsAQuuIkf;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\nx-request-id: e430accc-7f77-44ab-bc87-b56d349f3bec\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28979,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad6b9c09ca47fa5578aa46990ef9bce3","sha1":"f67480b8962d61b7e5fd49ed977997ac5174bf63","sha256":"98128f35b5aa763ec1dec94208b0aad0a9fd60c886d34567d6f9cb1405f19192","sha512":"7f6003f0a7666931df240c71b51b60d79777f6518dcc4b1ad0e687825629eaf770ff49ea07e07b076ccbff8053467caf0a40890681436630848357c6af312f0c","ssdeep":"384:tMhC+LyvjOhDtQqKi+TSJMDdFqVIy9DF2Qme0cg+wicjX74hdjK3ubSLrDS8S0SZ:yhC7ytDj+TQMDS7mT+wJrAh1bSnSZ","tlshash":"d1d2fcddaf664ee0888cd7c5ae1243a47f1fa1be1a4b8bb0c104eb317907c5cd98595e","first_seen":"2025-06-08T22:06:39.763903Z","last_seen":"2026-02-25T17:48:30.26111Z","times_seen":3,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/icons/promptpay.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/promptpay.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvUbpI7qbE40xeUPGe2hluwdv1ykDLmN2hVxVhwRDUSSBCJeKjFC1IRO%2FSR%2BQdaze%2FuDgIG7IQ9gZik0B5g5lUqsG0%2FOXPm9tJtd1%2BA%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-172\"\r\ncf-ray: 9d3908115daf0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":370,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6ac44ea0b58932fd9263b571abda381","sha1":"1b81fcbf5abc6148cf758f756d7fc8163149a4f5","sha256":"68c73f676cdb41e8598f6a6d69beec0bc8a8bb0cafcccaca3ba7e1593b41c3bf","sha512":"a30d02ca7f2bde62c0986b5619bd8cb92317fd7494549ecd214d2898c727dfc61b9f20d849af8d2ce6c95db5d8fedfe407c27d4baaa66f62a6290ea82c98d6d5","ssdeep":"","tlshash":"9ce02665924c892ce312470c9f3830b4207fb9dae3491359b844783a69286af7c772fd","first_seen":"2026-02-25T01:57:21.379051Z","last_seen":"2026-02-25T17:48:30.262151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/1/1b/Citi.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/1/1b/Citi.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: j6kn3ut78uxwvyen9uivr26nuvvht4u\r\nlast-modified: Sat, 11 Oct 2025 05:01:21 GMT\r\ndate: Tue, 24 Feb 2026 23:48:07 GMT\r\nserver: envoy\r\netag: W/eea384c10309641c05acbbd5debcd357\r\ncontent-encoding: gzip\r\nage: 64797\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 hit/5\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=Mfatna0zLOZ1TVcde8mLcwMSAAAAAFvdqgeYR1mgK8F57WQHO3BmhISlIsiKCEgS;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\ncontent-length: 1126\r\nx-request-id: 1e1212ac-e0e8-4e85-9eea-e2ef28a809ab\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2280,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eea384c10309641c05acbbd5debcd357","sha1":"a43806d5981bf696c26e1fe0371e92b4837aa8be","sha256":"25af4213eb210282ca882a052e1cac5e7be4742a70323ebbe9cffbe267e57f9c","sha512":"09c6939745f769e510d00c4be2685a91bf53b38fa9213fbeb1f2c113719345964b4eac76d425ee82ffcc930115f854f54a81635979c90e89cf2e1f1216bfc39d","ssdeep":"","tlshash":"9e41b5d4e6df4fe29e5dcb2298b068171b3b30c730952645c7623168a181ef325aca8a","first_seen":"2026-02-25T01:57:21.511913Z","last_seen":"2026-06-27T16:01:58.693143Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/825/small/bnb-icon2_2x.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/825/small/bnb-icon2_2x.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1746\r\ncf-ray: 9d3908112c8d8deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3237\r\ncontent-disposition: inline; filename=\"bnb-icon2_2x.webp\"\r\nlast-modified: Wed, 16 Feb 2022 02:50:52 GMT\r\nvary: Accept\r\netag: \"39e39ca433ebda412a810fd724075584\"\r\nx-amz-id-2: YVIyZzKxsV7uN3HzmUs98FbbZLlCsRN8Q/xdCPfFxUtlbWTf0vUOGMp+usb5aW5d+vQ0P46VDJA=\r\nx-amz-request-id: V2VDRTM2M31VG7FT\r\nx-amz-version-id: v33bpgYG6.VLwv9VTOSZhRGSlcErU9GS\r\ncf-cache-status: HIT\r\nage: 594905\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13190e0172162efbc92046d2b3b70127","sha1":"c84f2e5c71aefe20d8db2c18ba060506b8e1e13d","sha256":"74e54f284baf48aae2a5d7d6cd87131c1c3fd2294f4f2c2cc646716e4210a57a","sha512":"b1b7372a973ca60b231d34b204858087ecd912951d9f9accdef337b7ea7ea0943cb1098283eb324f815bc9dd40ad75edde82fc6e9f60303c4e1dca56f87c41cd","ssdeep":"","tlshash":"c1310ddde292ae4d1417c10d13ee045a9c546fc5d425bb7a4d8238db53e40e582ef4d9","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-07-15T20:12:11.605164Z","times_seen":63,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/2/small/litecoin.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/2/small/litecoin.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 650\r\ncf-ray: 9d3908118e338deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1398\r\ncontent-disposition: inline; filename=\"litecoin.webp\"\r\nlast-modified: Tue, 07 Nov 2017 07:38:17 GMT\r\nvary: Accept\r\netag: \"e87c135f3b5401282c3099270e20e944\"\r\nx-amz-id-2: IFqVf3IYhmNyZozCBIwpYyRXXgBhKUq51WMLyb/Wy6w2DBn1yiTpCxHFeDyTaTfQ8YaUkd3N+Vs=\r\nx-amz-request-id: RZQE0QVK6V9Q63XR\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 589008\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3428414b3289d86d845a64744d22bd77","sha1":"9dfe440fbad461099516e8ff85a31e9e0dd9a255","sha256":"856cfba073ac9f76eb8ce5a3e9e86637f842a175140aef91a08e25af885f9818","sha512":"e5e0b384043e663f2b17e859ae875fd0782d3668a4a11dc12c89a12a5e251fda8ffd020cc0025eec003078e3432732ceb668a7006623807996026de440842f1a","ssdeep":"","tlshash":"1ff06810c786b688734d2c964431ded435be31d577d6aef8f033396307991dd3894a9a","first_seen":"2023-05-07T22:03:16Z","last_seen":"2026-02-25T17:48:30.26484Z","times_seen":22,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/1481/small/cosmos_hub.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/1481/small/cosmos_hub.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1304\r\ncf-ray: 9d3908119e968deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3662\r\ncontent-disposition: inline; filename=\"cosmos_hub.webp\"\r\nlast-modified: Fri, 19 Apr 2019 07:12:43 GMT\r\nvary: Accept\r\netag: \"52db1d22f09fee8bf5a6ac073d2b0b87\"\r\nx-amz-id-2: /GatbuBu+6THj1cxxno8pfj79Go2u6iH9fzyFO4CyV/mL7S0Vmhr1n/U3DFr60csOHlfHG4A7L0=\r\nx-amz-request-id: FTYZYNZ6AAGE094Z\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 57072\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9fac3bf1f200a846b1fe6ce7cc66a991","sha1":"65f03bccadcc51fd54fb5ee32b1bb65814353445","sha256":"63ddaa29c9f2c1b546c458da39cfd88a927360b9aa86a186848675e7f5444367","sha512":"3366f8ef10870dc55f23ad72d10a4033b8b34c906c8e51503257956b0a5b78d56fd6952e34d8903f52a82b3a41d09c004cf955255d1f17ca09f3747e016f9337","ssdeep":"","tlshash":"ff21f8370672163458087d006230258a6308f0e2ac49ba5a7bb520fc4634f2913f3a8e","first_seen":"2023-05-27T09:03:31Z","last_seen":"2026-07-28T16:50:05.74313Z","times_seen":5,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/chase/117ACA","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /chase/117ACA HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 333\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPRM1C8R2PG9DRP6222E-arn\r\nage: 21162\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKdHP6mTGL7wvI9Sovr9cox6Gghkr2k%2BEccwZcZw3joO3%2FHkpEKiyPCvvjOLh5lv8d5QzEXY89L%2BALS5osrrs4Vlm7ubatfk7lHr4AEdiFn3Bsk%3D\"}]}\r\ncf-ray: 9d390811b90bc725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":377,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9ba235fb672732a316c181f52fdf443","sha1":"254a469805f07d57c1c224e2b1d3adc9c76d0796","sha256":"01c68fb6240d0d6dadb3d570f80fefe592c23e3ae75c2b8a2ac4686d4b5b9f87","sha512":"c0d0c39c429405f2046920bf91cf2d2a35bc783adfbffbee1abffb87668eea5d54b0bac6b83d94953115ed4a6fd0096956fc7416769969265e4dc73753b79f58","ssdeep":"","tlshash":"c0e0c0df1299a32ce1083e2c3fa0393058dc10e436eac11ef8cccb062064df2b008c04","first_seen":"2026-02-25T01:57:21.442309Z","last_seen":"2026-06-11T18:49:41.021686Z","times_seen":4,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/scripts/modules.js","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /scripts/modules.js HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6994ca70-5d1a20\"\r\nexpires: Wed, 04 Mar 2026 11:55:20 GMT\r\ncache-control: max-age=604800\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nage: 21163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgpKApmQYf9zSQUjl6UN8%2FksNrtUymRKJTRclUOHR%2FWlkTGd6sysoBkWuc9NlKQRbq34OUj04kweaVgc4a5%2FqXTryOPcPyqsottagao%3D\"}]}\r\ncf-ray: 9d3908117dbb0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-08-04T05:52:22.169114Z","times_seen":170,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":964,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/17980/standard/photo_2024-09-10_17.09.00.jpeg","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/17980/standard/photo_2024-09-10_17.09.00.jpeg HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1063\r\ncf-ray: 9d3908112c618deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: status=not_needed\r\nlast-modified: Tue, 10 Sep 2024 10:17:29 GMT\r\netag: \"1230e2f2ad5127dca8767dc55a22a1e4\"\r\nx-amz-id-2: rqa51P5N4v2b+YCg49GTVNWQ897Hiu8B76fA1osYb1axo5F+yiWhS/2+R8nIIkxyAhoMbztnNlc=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 9RQZ0RE350VMXP9Q\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: rfBKya9wDW_SIcWCmr7MoHtQoQIQXwLt\r\ncf-cache-status: HIT\r\nage: 969731\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1063,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3","md5":"1230e2f2ad5127dca8767dc55a22a1e4","sha1":"e5c177b5341b1f43cc2f9d2aa728caf73a5f3c52","sha256":"cc0c33e05fce7535c22832a65295d9662994c5e1521cdb7abc0efa407595ad8f","sha512":"ce5931140a9c6b2abd661c5ebe206f5435c145a1d195bab0affa9d94d10c7ca9d0a84bb282c4893033694efa24207eeafa61c9d1aaf2ae6e2edd3f167a0cb02a","ssdeep":"","tlshash":"b71198d51e82d003dd7b5d7912d648755949a844c02fcb2b704028e491ee1d34f751d7","first_seen":"2026-02-25T01:57:21.435469Z","last_seen":"2026-02-25T17:48:30.272611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/975/small/cardano.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/975/small/cardano.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2828\r\ncf-ray: 9d3908112c6a8deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4750\r\ncontent-disposition: inline; filename=\"cardano.webp\"\r\nlast-modified: Sat, 05 Jan 2019 15:55:49 GMT\r\nvary: Accept\r\netag: \"1e0453d0e5670dd366eb0508bbd45b45\"\r\nx-amz-id-2: HdGDdCRaHLIabGjrlnTGLlreYZ4i9K/DE3jThWbOClqNPGJzTgEsA0GFP6XPao/EUGXjOJx8BC8=\r\nx-amz-request-id: FTYW6PY3Y1XRC6KS\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 589007\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2828,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e632ab288fe5d5150268c92951f56ffa","sha1":"d951cd9783bed55448966bf555efa9c9e890f227","sha256":"10bae386a102e5290cecd655bf8d4155c24f7538b2a3d4d810df7a2235bd17fa","sha512":"13266e3986502e0873bd01a9d63aef23770447f93bf00789d8a102402074c365d237b4a739eb74e5bd1c82fa9ecdb2ce6304a50b8f589fd591484324a0f60fac","ssdeep":"","tlshash":"34514a991a5ea6dcdfdcfed2aef90dc8590c204c5e81cbb1cce12023d089038b0e6a80","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-07-28T16:50:05.750749Z","times_seen":38,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/12171/small/polkadot.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/12171/small/polkadot.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 690\r\ncf-ray: 9d3908112c758deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1722\r\ncontent-disposition: inline; filename=\"polkadot.webp\"\r\nlast-modified: Fri, 17 Dec 2021 03:44:06 GMT\r\nvary: Accept\r\netag: \"f45df5e0a0b4f95fd966fb93d4fc5ba8\"\r\nx-amz-id-2: uFE6zRE4+xqAuxxq3RwlSrbVWQHt4e0D71b+AGwmfS5NtgoFbq1Fg+hepcN1eb6RaoBZxv9uZ+A4cNaB93Xo4DJaY2A2p/kzFuxDNHoIzj4=\r\nx-amz-request-id: FDGGFPSKTD77G5PV\r\nx-amz-version-id: RRwUa8opYRuv73NYO43f58s48Y0S6IRp\r\ncf-cache-status: HIT\r\nage: 57072\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4133667b9da5a3a693d550a56bd07ea4","sha1":"a925c1f3f51b68d10ce98b147cda82c5bf4335f6","sha256":"afe04b201371072d579b2a8427ed6e3b105c030330e151d1abc87bd5b09e987e","sha512":"12c90e1d2c447c0c38ef44f41c1407253785ec67dc118854aab81dfb10fff7241971eae3dff716cb83b371a0eaebd88a92b7d0dc1ed14d6184f49e93351cfde5","ssdeep":"","tlshash":"220144129b55d6510b0c6885ce1fe122e2046622aa01a1e3c7ae7cd648326b9930c238","first_seen":"2023-05-27T09:03:31Z","last_seen":"2026-07-28T16:50:05.728152Z","times_seen":21,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/4713/small/polygon.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/4713/small/polygon.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2290\r\ncf-ray: 9d3908112c798deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3523\r\ncontent-disposition: inline; filename=\"polygon.webp\"\r\netag: \"c10fbb71cc3bc92651af3bebca5d0c20\"\r\nlast-modified: Wed, 25 Oct 2023 11:35:47 GMT\r\nvary: Accept\r\nx-amz-id-2: i9z7bjeyiX9S8YpEd6it9ttg6OptkNf6qH6E4DtX06rBE/wR6blRbRg7ZR37uRjDjX+iAqmjs6M=\r\nx-amz-request-id: 5FJAFMFAJG8XW931\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: F590.TyAUCiyY3rQCiFZ0kONtPVMFtAC\r\ncf-cache-status: HIT\r\nage: 79780\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5f4380b41a1f7aa379fb2d27028364c","sha1":"9a69e2e5e880958e41caaf3a58a100e24426d23f","sha256":"dc7ca8b6432a0ca3a5faad17c018e861f62e5a329cbc1a30c0ff5f99c9d24acf","sha512":"aee3a095369c473119607570886e4e9dc6664e107be8a190a2b268532c9b5d18f264cddf0537396b4ab4a60bb4b043c7bfcd2a6db0a97c9cf3be797377b11d8e","ssdeep":"","tlshash":"32413a55ec43d32e6836cad0274cd5640cc2c2826e34a58849742b038fcb3ee6978295","first_seen":"2026-02-25T01:57:21.463476Z","last_seen":"2026-02-26T15:13:02.980885Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/26375/standard/sui-ocean-square.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/26375/standard/sui-ocean-square.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 886\r\ncf-ray: 9d3908112c658deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2182\r\ncontent-disposition: inline; filename=\"sui-ocean-square.webp\"\r\nlast-modified: Tue, 01 Oct 2024 14:01:41 GMT\r\nvary: Accept\r\netag: \"48d061083eb3462319e82a877dd7f20c\"\r\nx-amz-id-2: NAaPYmvMWcZ+7HRIkDjdkz7JENzxg2PBHilgMwNWvIFYKfb1Ez7/8pCi4OIJabdNK0R5m8muHwQ=\r\nx-amz-replication-status: COMPLETED\r\nx-amz-request-id: 2C1DHH5CD3GSS7BJ\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 45Y_FJ_XPz_9fvnSYy9ZjlT7w2QnjDps\r\ncf-cache-status: HIT\r\nage: 33010\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be0294051345c34a55f2d39dc801d392","sha1":"364ff74fe54aa04796ce1390bdf0390edb5769ff","sha256":"0998381d80e7ff116e815330c9653154e516d07c0c289edb1d4cee867d3abe5d","sha512":"464846bc3fb246bfa1fe6ff58c125e1e273d8498b44b7d1a1f5aac100e7d1ceaa8f890855cba9301d5403ea6fda0e4171cdc8799281438b3e4e2b395755d24f7","ssdeep":"","tlshash":"3111e60bcba99f2148013656100bfb606308c498802dde77baefd7be703c026cc1e1d1","first_seen":"2025-02-11T12:36:07.107404Z","last_seen":"2026-02-25T17:48:30.279109Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/1/small/bitcoin.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/1/small/bitcoin.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\ncf-ray: 9d3908119e8b8deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2514\r\ncontent-disposition: inline; filename=\"bitcoin.webp\"\r\nlast-modified: Tue, 07 Nov 2017 07:39:53 GMT\r\nvary: Accept\r\netag: \"a8850cb1a50f04f848166f3a66f34b5b\"\r\nx-amz-id-2: GoqdBdsaLf/Q2qu9fydSjTr+XsiuSf3kGYMRkphWCrCgZb/eioLdqKEGsuCkvaC9Jm2MCnnoyuM=\r\nx-amz-request-id: MYB7YR97HQWSQNRN\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 596541\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"180a19dd03cd01e2f7bdd5356b5a1389","sha1":"24704d9caa208d074b7fdbd7dd17bcab301e3cb3","sha256":"71a3df8ee8abe641f428f12ba4f119fb979d3aa546e777dea6ac9a9b2853d277","sha512":"9798fd90573aa1b78457ff97b9b7829bcd99325d658a17d8520b165c578eeef760ff7fcf1e0203c456869efc6d1db93075c815f091e34ca1723a746ea21d4551","ssdeep":"","tlshash":"7531f7109b3882f7224e207e63f9a7a221136b096554c63f17e13fc843960e87a13a6c","first_seen":"2023-05-07T22:03:16Z","last_seen":"2026-03-13T02:12:19.313186Z","times_seen":104,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/6319/small/usdc.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/6319/small/usdc.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2192\r\ncf-ray: 9d3908112c5c8deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3966\r\ncontent-disposition: inline; filename=\"usdc.webp\"\r\nlast-modified: Fri, 22 Sep 2023 09:17:54 GMT\r\nvary: Accept\r\netag: \"2129c1382a6617f0083ce8d5936b738f\"\r\nx-amz-id-2: pBSln3hRA2pGa/p7frq1ukNL7ApabXIXVhP41UXhMxDx7qA0RZzeNJO6PLBm+E9nfTJE+SbbNBE=\r\nx-amz-request-id: CB0V1FD0JFT710J2\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: nOS8t_KqK2qXqvXpupCqwPtRFWgWVKp_\r\ncf-cache-status: HIT\r\nage: 48330\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f350be0adfad10e4919a11ed90a504f","sha1":"cdfc2e43f4abecffa34fa7bd946e082f3419bad4","sha256":"004af0b121760201dd70df65c4805e83a2748cee967844e3fc12ebf62d7608d3","sha512":"c86561a4e39974c6a13ff64303aa8399be3927cc12d809ebae4aa7626cb488f3dc937ed7d6b4f54fbc2ceab11c150978f1c952f395505c8953c8647a6d2b88e3","ssdeep":"","tlshash":"05413c725363dee0588b78472a869d47e363f9a97e6417207e858d0c2ccfa2d82d078d","first_seen":"2023-10-25T12:08:18Z","last_seen":"2026-08-05T13:04:44.079024Z","times_seen":45,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/11939/small/shiba.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/11939/small/shiba.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2372\r\ncf-ray: 9d3908112c818deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4446\r\ncontent-disposition: inline; filename=\"shiba.webp\"\r\nlast-modified: Wed, 02 Jun 2021 07:37:29 GMT\r\nvary: Accept\r\netag: \"374061675e57d5722dda6263f8b320b2\"\r\nx-amz-id-2: WwwotnjOKBUBdrjRiKtQfKVLEaZqn80RCcQOJnS27XMmuq7qQegkvQqxZ53OSNFDuLnyk+1MgYI=\r\nx-amz-request-id: 2PMPQHTSJMPDXBW0\r\nx-amz-version-id: jvfLXlhsDlb1wF3zJeLWVYoFChBIFheC\r\ncf-cache-status: HIT\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76b0ea0b170886f95792d2c375e6f562","sha1":"d1dd0244bc0d28f1fca4976e1f2396397606af30","sha256":"6eb57fdeb33d7035f8b3119f2530a97dbf2ff8505921a3cfe0f46a64064087de","sha512":"bc7d965a500f157e647802f17596a47cd4fb03990c0fb4c6160752e27a0a272913574188486cc8ddcd749942399701f137e21226f6a02f0acd6eb8d62433b802","ssdeep":"","tlshash":"cd413a5b7a74be53ec0a35bbb6bcc7c448e02e954a808d19cbce2847f8205c88da3557","first_seen":"2023-05-25T08:36:56Z","last_seen":"2026-07-28T16:50:05.736251Z","times_seen":48,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/swift/F05138","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /swift/F05138 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1267\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KHT6TGJZ3NVF3EE04HTG0AZ1-arn\r\nage: 561841\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 19 Feb 2026 05:44:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BlpsLgwkMxoiUqHmG%2FtQjZIuV5f4sAMXHF%2BoKnV06cnTlFgaGTPrGItOgrE90DqJxmBkBTWDowJYe%2FyrefjkaccNQ1DwNGgeN6jkIuz9EDJDNQ%3D\"}]}\r\ncf-ray: 9d390811b8e5c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc81987736fd6c90d3635d3f4c32449f","sha1":"f9d85de156c1f9b8d44a7bb044a8d36149eabe40","sha256":"61012b73dabcfc026524e0aa84135482868023e9d68f7cb4fe19ac43a82b73f2","sha512":"74836a43eb9a5f5384e3e60d82be61401c8323532f9e33c31ff529a2a9add4a899fc38e98cea682fb11ff91dfca0f260e280b81c789ab783a7901df25463bb2c","ssdeep":"","tlshash":"a731f2e64ab0674c55825e3edb15ea91a30fa0f8b8c555840d4fca24a4c74e7e756c14","first_seen":"2026-02-25T01:57:21.388498Z","last_seen":"2026-07-01T04:39:37.566388Z","times_seen":8,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/paytm/00BAF2","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /paytm/00BAF2 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1478\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPMZMKHJ39ZR1R94K5Z1-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKVEE2VfO8GBGSvRCqd%2BXXa6Wfl%2FxdFErQ3gLOGOH%2BMQE0%2FlWkQdHq%2Fqcj%2BL37C0AV6LUhHD3n0QZfuL4QyuRQkQoXloqIoIcsHVPWI7Bbx7R3Y%3D\"}]}\r\ncf-ray: 9d390811a8cfc725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f792ed022a260792896e4d214a8ed174","sha1":"74ed5881cfb356035163271c79927343ae3e0e17","sha256":"52af2ec35c6f54ef331b936c1b525f6c67bb039f654ad844015d1d0b6d59a4f7","sha512":"8b2bb2df390f12a8069ee007980c2b01fadc67a096e2f60e7d3d373c960d03100fb3a783b491ac47548bb06831ee8539c322be227087cd2611fee242c7608c3f","ssdeep":"","tlshash":"e641aad1371ca6ed6b8ba68edb32e5c4635d113b70aac9805e6fdba854430c4f737019","first_seen":"2026-02-25T01:57:21.498939Z","last_seen":"2026-02-25T17:48:30.283029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":34,"dns":7,"connect":12,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/icons/upi.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/upi.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BNbpw4DwASuqrrBspRqAqghtW8M21Fna0JivVsAvGi5EH2AiyEEPPrJJ4TKwsEUf4Zvc67wm2A4gGJDS6VgPVjRc%2B1LTKnldmrTZD4%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-1e8\"\r\ncf-ray: 9d3908115daa0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":488,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"833e790e93fd5e12f2966f7859aa4943","sha1":"e6ee70eb512c3197e68eede7e4a9775f4ff866d4","sha256":"0ae9ff7df4cca6ca96c5f077b88c32e19c304f2642e270325d066665b2af1708","sha512":"3c730382c34e1998fd4b88a35fe2f0bd273ad0217a100a8e66842fc393babecc1f87a137e4624819eb0f6b65112e09a051c6ab1996b54ce7366763e36feb4720","ssdeep":"","tlshash":"7df02e61d34c592cd7144705a7287179206fb4da57090a54fec410368ca959b5cff2ed","first_seen":"2026-02-25T01:57:21.432511Z","last_seen":"2026-02-25T17:48:30.285405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/325/small/Tether.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/325/small/Tether.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1130\r\ncf-ray: 9d3908112c478deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2160\r\ncontent-disposition: inline; filename=\"Tether.webp\"\r\nlast-modified: Fri, 11 Nov 2022 06:37:45 GMT\r\nvary: Accept\r\netag: \"a660dd0441f12c1508a01e9d6fb031b6\"\r\nx-amz-id-2: wvq+8dKXtO/UhNGeiDOQ3K8OkBFNcG8kU9ln4HEv9YO2OvBOJ2XphlII2xL5J5A0F5LiXQybFgk=\r\nx-amz-request-id: QGZ37MTFENE7RRNH\r\nx-amz-version-id: 6oKs_8YPOAwF.s8SZfyLjcrW5Vz4NczM\r\ncf-cache-status: HIT\r\nage: 1010056\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c53bfa659372ae928f090ba22cfdb68f","sha1":"e5a9ba127903feca6a155b90e50ae4b52453d5a8","sha256":"75abd20495e08d4fc1c3d57697c7052627a94a0f9557845eafee3ca6c593fcaf","sha512":"71ecd46d4efa2c40097a9a590152676f57f333875c7eef35c3cb1a5339e81014c3459bbd1ae47c9b7ee1e3235139579aa909fa54e250f3701ff67b3d0e4c3281","ssdeep":"","tlshash":"0221f9a408f90775cf1c3e924e0913a42ff8a8a6391038160f9f2c57a9038c46586385","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-02-26T15:13:02.967935Z","times_seen":61,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":23,"dns":11,"connect":1,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/5/small/dogecoin.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/5/small/dogecoin.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3382\r\ncf-ray: 9d3908119e898deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4857\r\ncontent-disposition: inline; filename=\"dogecoin.webp\"\r\nlast-modified: Fri, 18 Jan 2019 06:17:37 GMT\r\nvary: Accept\r\netag: \"3fe73d0936ccf1dc5467ec873cdaf72e\"\r\nx-amz-id-2: W8dDEqjwDltNjJ7KZXKhgqWJXRLaV/1Ibblt+t8cjnHpnQJF5gWPbeIEI1vi4zUOJWfXbn7h3lo=\r\nx-amz-request-id: MW56V3KP73TAN3F9\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 754916\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aac7ba312bcc2073238bd11c4699aae1","sha1":"e8616426a3436526dad90b200a7390893a4711c8","sha256":"382d37b24ed5f14239ec41b3dbe3e8750bed11891f48140dff49e6a0efc6dd8e","sha512":"b1716530834442d84b5ffe9e8869eb1e285e31d5b8f64cf4c5ca0b2a757d8e384a3f4b4d2c488bee87cc94e4b8b15ed45f11ff219f07fb8e538d36c6597df778","ssdeep":"","tlshash":"8b615cb3294f5fc77982625b910d6f3705c71251689a9ed7e13461137f28280a0dec41","first_seen":"2025-07-30T23:38:21.192723Z","last_seen":"2026-02-25T17:48:30.289191Z","times_seen":27,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/klarna/FFB3C7","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /klarna/FFB3C7 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 326\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KHAW013NTYB3GB5SVE0BXT1G-arn\r\nage: 1076511\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 06:46:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQtacSDyifm90xm72Zl3S3nwWji8E%2BdSjyqT7BHaKwqNqoOmhQ1sLJtJUv20%2BfOT5kQQpln4dg7FMFPj%2F%2B7cN8CoFrc8DzWbIwWigMhgxQpAsZw%3D\"}]}\r\ncf-ray: 9d390811b909c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e7ebe262efe3fa94a417fc43b46807a","sha1":"b253d9cd91461ea1de3f849e4b683544c4951015","sha256":"88f8ddd478589c6dbe730292dc589d1baa6793d604a2e7643d522ffa48fa5084","sha512":"b9fa2ae0f68684728a6e053fcfaa86704545221d22461ae79be39dae50f2900fdf34b1c648d2704d7358863917b2ab96d21f34dd7b392418c5527332aa3ff15b","ssdeep":"","tlshash":"bfe07dea5dd95498ed8fc7b4b8693145507f77d440dd02e5d9e7ca3820f40e2e507c51","first_seen":"2026-02-25T01:57:21.440938Z","last_seen":"2026-02-25T17:48:30.291517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/icons/papara.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/papara.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCdSz9cfNLwloCXAyr1qjlJhzwCo3cCWPIpM%2B%2BlBecli0DvaN6bsT%2FyikzipUtrU7xzx3uW82RFKtk%2Bl9axCNlz6hEno4tVGaKqNTFw%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-104\"\r\ncf-ray: 9d3908111d880cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e54ce91a3cce58865d108c1326e1070","sha1":"66fc903c65ec30f1589c8b891fc3223db9bb8ba0","sha256":"8a09257572810be5ce2931578fbd21d6921ab230698c6155a6e10c2092d81176","sha512":"c6744c5da6e9061bc217c6806ce3f96aaf65781a0a14e2f8924cedaec7fc4ff0fd68393b7f8380d220a94ec69fff37efe359aa5b550609e07d79ca2c21cc99ac","ssdeep":"","tlshash":"75d02ebaa14c980ce90097883b2830c021aaf0d9a2550304ba882b08a62869fac665de","first_seen":"2026-02-25T01:57:21.50841Z","last_seen":"2026-02-25T17:48:30.2962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"changebit.org/icons/privatbank.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/privatbank.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=neH0%2FCK8HcXAYCNXTBg%2FhGZQvt8dliRJ4oRbQww%2B0rN%2F4lebkavU9DWfNP5GuUnLomEQl4mHzOrO%2BiY0D7FHHOOuVTIRk1rE75nc5xA%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-11b\"\r\ncf-ray: 9d3908111d8c0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02ae9cda24f8078c36488518e0346952","sha1":"5f3d75cec2aa8e81f06e68094124c45afaf2dc03","sha256":"3e781377cf0d54cd5918509da205f1c1567bf0b1b2ac196f71125452120f9a62","sha512":"58b577020ea1aea5185e2f667917d61961469c6d6bf69dff4019c3ff37427a0a5bd378bfda63d1206d85fffc55a305e81654c3ceeefd7fddb9fb8e5085492e65","ssdeep":"","tlshash":"b4d0cd1680dc4e0cc6044909761f7099a45995c987868a59b69155075c87857258d3dc","first_seen":"2026-02-25T01:57:21.429171Z","last_seen":"2026-02-25T17:48:30.298837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"changebit.org/icons/blik.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/blik.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=be3Iq0ZH1EuJLnVpVMz8gfsb5%2BPwCqHj1xjQfbFaa7G87edaf%2Bbkw4lODwGQ4MJ7wubMY611ejhYH7XN%2F21VLihv28zSvFHVmINXD9c%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21162\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-204\"\r\ncf-ray: 9d3908112d8f0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":516,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00bc5e555015a4fec6dba417b2e2e043","sha1":"44b6b895f1c562f760ee9012dc05148abe59ee2a","sha256":"c26ee65a5fef553915a57dd1873fd54950c072ef6cf2c1fe52615c3668cc3e03","sha512":"827cfd545138205a263d5ebb31e65fb27ce8af65c6067f8e2af5b9e737b260b66d482685c67fab96d8828efc87736fdcc2b6fb8526b7e2cad52315ffdd433a9c","ssdeep":"","tlshash":"25f09e15d2880f3cf7100b2ae32d31b121bfb9caa7455634e8a02136784899f6db73de","first_seen":"2026-02-25T01:57:21.474509Z","last_seen":"2026-02-25T17:48:30.301029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/279/small/ethereum.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/279/small/ethereum.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 948\r\ncf-ray: 9d3908119e8e8deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1887\r\ncontent-disposition: inline; filename=\"ethereum.webp\"\r\nlast-modified: Tue, 21 Jul 2020 16:28:02 GMT\r\nvary: Accept\r\netag: \"19758c6da516f95d9fad2a210c525ee7\"\r\nx-amz-id-2: O00UXn5c28c69kiGkXkhCPBC+XkRzayCY7PN2JRTVSWGYTnYzwM+o/X/AI1x9v2hBlseiLGKPuo=\r\nx-amz-request-id: QVDFZN7SEEMXBC9F\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 602169\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31e1aba01328ea90f32d232f715ed6ee","sha1":"78bc3af43f1f851a185985e3eb68c3592be97978","sha256":"8f45cd0b346a8c0f81f590955b0543d96e811e03c85166854aed6cd498ac095f","sha512":"0f618acb05c9f7b4eb219d2c794d189826bfbf8c61bd9a1a59dc6eced364cf5dd154f870a54e227ba14f7c95a218e6d48c8d7d84d7de1e83b7db52361cab138a","ssdeep":"","tlshash":"921194644260a0268abbb00036db414a0134d8e4ee56c54e49b28f07094833e2c84775","first_seen":"2023-05-07T22:03:16Z","last_seen":"2026-07-27T09:04:08.210103Z","times_seen":110,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/discover/FF6000","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /discover/FF6000 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1435\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJ453VHW204DQ37DX0YS41XJ-arn\r\nage: 228088\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 23 Feb 2026 02:26:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtzwMOK63fFzA498GqRkE93j6eaSZu%2BTFnjZgpa8K5RzwlRiUCZziZN21F77PBeGFjaR8nIs4q5uuU6hBg91Jt1h1vsKiqNCWTuHQpJgt70MXzM%3D\"}]}\r\ncf-ray: 9d390811b8dfc725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8f34698f6d743068c55fd47ed2f8143","sha1":"cb145b0fc95e14219c81947b7cf2715eae0fe2a5","sha256":"d903681ee03ab6f1ee7e0d4a742683ac27e37d356bc03324140bac5b9d10d453","sha512":"42257fe5b4b64dfc24be9b7e440d8acb896a86e61721de1029e358ec622395e0cb750b27e9f40133b55b427b9ea86d42412229c7606bcbf3e57f89bbaa7988e9","ssdeep":"","tlshash":"ce3123ca6394a6dcda98be9daf3da998121ea071b9a3d480dfcdc754000b890bb1f454","first_seen":"2026-02-25T01:57:21.385716Z","last_seen":"2026-07-25T07:50:10.531876Z","times_seen":4,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/zelle/6D1ED4","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /zelle/6D1ED4 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 401\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPE87PMY1KMPTQWRES6Y-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYpr5Y4mzxSMU4xztfEDOpj13QPtw%2BAjJ6%2Bgv4O3aW8gMeXZySk3WiCsZtFgspcDGWdSlQueclgvtAwEoRgTeOXnxwdHM31IYmjVtlqV8KXGrxA%3D\"}]}\r\ncf-ray: 9d390811b8f5c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10a592c491a57312ab1ddfaf0f92024e","sha1":"074308f19b9307354baa0762ef090fb737c11b53","sha256":"e7baedba90617e950874da53ca4a1eb1d03eebd140c0a029c311eb49822974aa","sha512":"27c2b20eace33152091b0aa5c3f8ba2daccfb06f6ae337cd4d3146884269210e030803cd080afb63e9539966b838be8d77796d476afb499ab366ad3689d997fc","ssdeep":"","tlshash":"01f02bbae648716d439ee703bb70f80052cdf08474c5c0f8555d0f90209f97ca7ab491","first_seen":"2025-11-23T13:00:43.875913Z","last_seen":"2026-06-14T17:45:42.137293Z","times_seen":7,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/wellsfargo/D71E28","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /wellsfargo/D71E28 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1767\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPRPQBTDT9MKA9CD54DW-arn\r\nage: 21162\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBQBkhAr3CUcnoVDSEhdTzsRk1L6uJmqLYNV1XyakfsPH6fymOoVJCzLlxugd0XN7hvGgbvE20CwL8nqNqHMh7in2QadWG4WLh86TZbj81v0cdM%3D\"}]}\r\ncf-ray: 9d390811b910c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2446,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3e1ca6f593887fcae667e81e07f91d9","sha1":"e1c89b8466afcd118e781c5c1911fdc06d2fef02","sha256":"9bdc94d13013564576f14ae3829b0fe9454a5517b60a92fe478f8e6368328c2b","sha512":"37bcfe4dc50122f0f629b9fc67129d5a1c76aaf9c57f5f1997bf7bd8b5325e259b705f607f5549e3bae165538728c62e652239a4e37bf0b97ecd72e8784e24e4","ssdeep":"","tlshash":"115141c71330f6ac899ad9af9e299ad4722d40fdf657b8e405df4b582803c45f308800","first_seen":"2026-02-25T01:57:21.501097Z","last_seen":"2026-06-11T18:49:40.953544Z","times_seen":4,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/scripts/w-loader.js","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /scripts/w-loader.js HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6994ca70-a2f4\"\r\nexpires: Wed, 04 Mar 2026 11:55:20 GMT\r\ncache-control: max-age=604800\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nage: 21163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyXH8cpmExOQMlocV3RAa2h3DW1f88C2726LGJk%2FfGtb2e2JPOnVXqY4IFWOlYpW0sEizcWIBd924ddAxKEHLaoYaeTGyzS4fyiYyeI%3D\"}]}\r\ncf-ray: 9d3908117db90cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-03T21:00:55.094799Z","times_seen":405,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/877/small/chainlink-new-logo.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/877/small/chainlink-new-logo.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9d3908112c7c8deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3057\r\ncontent-disposition: inline; filename=\"chainlink-new-logo.webp\"\r\nlast-modified: Wed, 25 Jul 2018 06:39:46 GMT\r\nvary: Accept\r\netag: \"dbdded50682d6461cdd99b0630af7382\"\r\nx-amz-id-2: n4YMuL8hw6PW8+83W7p2HrVEGaDNWI0DlWMTAWOpsZBEUOZlY3/pOsTnL6SdBthCfQ8wFS+0tUIc/dF4FE4NxSC4p6m58VR/wCZiXKvm174=\r\nx-amz-request-id: P49VXG0KFY2X4WK5\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 589007\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc919461a77a377e785edc621f25ba61","sha1":"9a11f531f743a8b628b192fbf4b63c0ab0ebd07d","sha256":"8d27d3daa76ac7a3abf2c8bf24f4906a6248d55dff5f8cd7cf372ff362bbe09a","sha512":"c9d478edb69e0900b0a85ebd7cf7ea08bc80b21e4fde0b79a9c94b36ba8e0d3ca67841bddd5605055d5adb40477d00e5172b584314ecee5b200d09b2d64609af","ssdeep":"","tlshash":"3931fa8aa0cdd297a0ce2e18da9ebff1277fe845a35355f3015b08c560d58e0445163a","first_seen":"2023-05-27T09:03:31Z","last_seen":"2026-07-28T16:50:05.761626Z","times_seen":23,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/paypal/00457C","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /paypal/00457C HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 446\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KHVMMYBFSAFSZACAGV5PAE72-arn\r\nage: 513789\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 19 Feb 2026 19:04:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqqg8EBJdDcCiZvqOyH1wMSs%2BR2UkhuvBGv1Kx4ci9THF2RQvyF9wGnx7F9FkGdsGg2uhfy%2B3e%2B3VYuUPDqj0FUfnn9Ug0XIzneUNJ5%2BYSsMg%2Fk%3D\"}]}\r\ncf-ray: 9d390811b8efc725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":467,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05d72eb0f6c434b7a2028b8c9ba21aa7","sha1":"b2ba57ceec752c5f923b85f145837d4908f9128e","sha256":"d345a682c6591cf87eb90e2057da68b4b639b06205e7912bfd6085aa1f0050d9","sha512":"bebea642a6d05d44f0b29a0c596cc637ec6f40b1c716694972b3247836ac796c7449f18809b4f19e942fa1ca5fb73c62689cfc6edd7a5d02885f1b2e59655b79","ssdeep":"","tlshash":"0cf0dcf99af40945c2dd4e955fb0fcdc922d817e60e90159c4e6430815a89b9be8de34","first_seen":"2025-11-23T13:00:43.866478Z","last_seen":"2026-07-20T02:12:18.820342Z","times_seen":9,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/bankofamerica/012169","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /bankofamerica/012169 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1114\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPRN1R4EXJQCS7ZF5VN9-arn\r\nage: 21162\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHRf1mRqlP64pUfUzkQ8%2FXPYYt%2FtrVXjus4YzTESDz3wnDBNTepg%2FPF7sTQv4iccbyWoQxo3hJDh%2Buzbr1LaUtzNNUDiy8Ky4UT8YTZmlM9c3fQ%3D\"}]}\r\ncf-ray: 9d390811b90dc725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":1341,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9be4437c8722d2cbfb9113cbdcb9c22","sha1":"75b7817130c970347e2381c07ce6d98b69ecccd8","sha256":"333b8ad593ea8436cceb3f8b2011043df14380eaf57e26f2c41c301662a2db5e","sha512":"2db742917787c8c206670972c39c1782305750d2f74763c400a1e1d107a01b8c3e41f644e7854491a194b93b4d52a6ebc831b0f73464d8e91b500353227abeef","ssdeep":"","tlshash":"642171d42370f32912ec805e6f70a458e75e20a7a8e7c8c44dc99714c08bad0fd0e470","first_seen":"2026-02-25T01:57:21.443796Z","last_seen":"2026-07-16T04:12:36.479436Z","times_seen":5,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:05.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://changebit.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 12:41:01 GMT\r\nexpires: Wed, 24 Feb 2027 12:41:01 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 104824\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-06T12:47:34.013262Z","times_seen":253772,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":123,"dns":3,"connect":11,"send":0,"wait":9,"receive":5,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/d/db/Monobank_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/d/db/Monobank_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 1x1pr64j049mnsx2zcy4czms6kt6vqs\r\nlast-modified: Mon, 14 Aug 2023 19:24:35 GMT\r\ndate: Tue, 24 Feb 2026 19:29:36 GMT\r\nserver: envoy\r\netag: W/9552318750118756e77207ca44a407be\r\ncontent-encoding: gzip\r\nage: 80308\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 hit/8\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=AyWEpr9LDQ9q2Ewko_Av5QMSAAAAAFvd-IG3h5d5Rf8AZIPWxpP6naPwCS3_s83N;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\ncontent-length: 2955\r\nx-request-id: 209598c9-ba99-401f-bce9-f4d185f37df3\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":8237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9552318750118756e77207ca44a407be","sha1":"106b69b2594cf5b5ceac2ae7a3d7c407310c5334","sha256":"e7ce56e76fcd54a3956a2abff157aa39a6e95b3f98dabcb8375225825d106a6f","sha512":"ac1a0420590cf80ac457a1c142d9063ae181ec3b3992fe89da277bf457ebf37f0167f91d208daca90da95ebe13dfa288591ecfabf3788f922107717f0db18f5d","ssdeep":"192:xtPZAo+oaeeqqGeKc4O5dTg2h+c5Uj6VXIMbmMOhtQnq:xlZAo+oaeenNTsc5UmX+Qnq","tlshash":"ad023edd3f504af8a955f2cfab021068b81351ed7ba187b5cb289f2439894a60e1fcc5","first_seen":"2026-02-25T01:57:21.472205Z","last_seen":"2026-02-25T17:48:30.310535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/2/22/%C4%8CSOB_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/2/22/%C4%8CSOB_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: hohkhsobw9hf57lyi7fr87da4lq8ary\r\nlast-modified: Thu, 22 May 2025 19:19:37 GMT\r\ndate: Tue, 24 Feb 2026 23:48:07 GMT\r\nserver: envoy\r\netag: W/92fa8f6743266baac61065f9519f8a69\r\ncontent-encoding: gzip\r\nage: 64797\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=AMneK_jIrs54TPzJuHRoYAMSAAAAAFvd-CGX2D9AtmKqWALHkwriKlj9qTgwu_Ri;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\nx-request-id: a774bf83-16ed-4fec-8173-a1fa4897b21b\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92fa8f6743266baac61065f9519f8a69","sha1":"975b793e8473df30d69ae80c6f41f9ef5883768e","sha256":"d6ab6c266f2f6eaf3a41678d7c3e256c3e7fa5ccc08ebc388dbcf0af27fd509e","sha512":"c3c8c13ac38d8a7721655e6b6df0f50cd5581e5e670c1dcefd080ef1763c2d45ed27b821da4ad654b80df952ea497b29179e720071f1a5d5e49001aebee9a6d7","ssdeep":"","tlshash":"2b51c606073eb6f4e0d5191d5ea2328337f6b8ecb770618cd3c729715416ef2b928a16","first_seen":"2026-02-25T01:57:21.510136Z","last_seen":"2026-02-25T17:48:30.311642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":64,"dns":3,"connect":28,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:05.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/spacemono/v17/i7dPIFZifjKcF5UAWdDRYEF8RQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://changebit.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 17:06:25 GMT\r\nexpires: Wed, 24 Feb 2027 17:06:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 25 Jun 2025 16:58:01 GMT\r\ncontent-type: font/woff2\r\nage: 88900\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16520, version 1.0","md5":"049dfc5919c21896a13296775d80b8c0","sha1":"e2ee2d370f0d46ca5a113126da3b58e16240fdec","sha256":"fb4a81a2d0a893e5c38c394a7e716a1cef0b24610a0af49c96f6d529bd66bf2b","sha512":"ffe3d5afd5a536cb2e78212c39163f16c254fbddca8c586ad99f0f06d27dad6af5b664d523909a0e3c5ed10d239e7f0fd96f2b2970163b23082f8be15a62cea2","ssdeep":"384:KWnkX//eTuOOsUGC9voO/fHl7exLa4Mp2e0+9NxHg+UM:KSm/GTuPsUG8vnnl7aL2pJHg+UM","tlshash":"0272d148764753bdec6bc86ce1e9ebd2e835b934c83c428fc858d8152161a53e86e34c","first_seen":"2025-02-19T12:54:04.599046Z","last_seen":"2026-08-06T08:11:35.219821Z","times_seen":4071,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":84,"dns":1,"connect":10,"send":0,"wait":12,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/_nuxt/u2wkLzst.js","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /_nuxt/u2wkLzst.js HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6994ca70-2de08\"\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUA5hNRetaMk20PtsOflWHxfgcml4%2FR8c4kCd6FJAUQL9Rh00DVYQT6J%2Be%2FMghwkbKjCgqbEzN2HsYD0oao%2FmpC%2BrSLT0URy28iGeeE%3D\"}]}\r\ncf-ray: 9d390810bd600cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35147)","md5":"41cc5cbb1384b04a5da47f7d92efe530","sha1":"54e5d7b689a7c893dd03e2b83155723474eece37","sha256":"a953bc380584759fdc63120cbcd6a7e0b8b3b727ad61e490b0ad0b9a87d66c6e","sha512":"ed18b8480cf9f1b6f85a3bd8b67e09676cf490c7e5447c334f651495f3b9262485b27880311ce23d500d79e46e0e64e382f04f3641c767b6b248007b81d4939d","ssdeep":"3072:jIfU2TJCT0XHYDE0PPa4rHNIDHVYoKNJQcF7aeG7prHXSpb0N:T0FXYD7PbeD1vKNJQcFT2HXSl0N","tlshash":"b70438e53196b07243ea1ae1503b1006f3792915384ec4e4f16cadeb3d6394a91bbf7d","first_seen":"2026-02-25T01:57:21.514847Z","last_seen":"2026-02-25T17:48:30.313563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/12559/small/Avalanche_Circle_RedWhite_Trans.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/12559/small/Avalanche_Circle_RedWhite_Trans.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 854\r\ncf-ray: 9d3908112c718deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1966\r\ncontent-disposition: inline; filename=\"Avalanche_Circle_RedWhite_Trans.webp\"\r\nlast-modified: Wed, 14 Dec 2022 04:36:16 GMT\r\nvary: Accept\r\netag: \"b96ca6f624d7e517b9b0bcf7d4c70a06\"\r\nx-amz-id-2: xY0y5w7jqQFvYvZUsUY9izkq7wcj4dSJJ88DdqDlXajHhT5yHiD5Fgb9r/jaSCzvNJ5eUaBxLTI=\r\nx-amz-request-id: PCHXZMHV57MZ4SZW\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HC_Ey0u5QoRsg7G_3rFd3SrEP7lTkrR5\r\ncf-cache-status: HIT\r\nage: 604196\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9923c9a10683f6ae1a1018df91467f66","sha1":"fce8f9d3400ed0694d01aeccf20ce48e8f94903f","sha256":"98a8b877e9995fcba0ad177139c9add415b59502bd4a5c0cbc2fb27e9994818c","sha512":"393650d5a5b39327f9ff82188ab5847e3b8110d85adc9f75d3487da9354fa2cd9b49b6a79b322ee466bf12d792867f4e0ee9ce0ee92a060767df15825da92ab3","ssdeep":"","tlshash":"830196e774f9ca2b1ce0e212f2361e5209535d4ad4f617f3f9698e46052963510936c0","first_seen":"2025-07-16T07:52:36.88685Z","last_seen":"2026-02-25T17:48:30.314921Z","times_seen":10,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/1/11/Sofort-klarna-logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/1/11/Sofort-klarna-logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 09:24:21 GMT\r\nserver: ATS/9.2.11\r\netag: W/a6a8de92bf952486032a424217208ea1\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: c8imlomn071gn8r8p4ks13lzlnypr21\r\nlast-modified: Fri, 27 May 2022 15:46:11 GMT\r\ncontent-encoding: gzip\r\nage: 30223\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/24\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=Dir48Pj95LKvlafhrg-jqAMSAAAAAFvdEjUC7ExaZqQwV3AWKqP2rmAtxajTSFr4;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\ncontent-length: 989\r\nx-request-id: 1c3a72da-0ed6-42bf-b94a-fcb0422a6b26\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6a8de92bf952486032a424217208ea1","sha1":"68c15fd142b76ad3a089930c25b6725a273e8339","sha256":"ff7b54c1d5932719b34aac78b8e26132018dbe562433fbf06833c93d46031944","sha512":"e0214d3b9f1a896387691ad6f1b4e9cdef9b6856d3aa38279b60e718044cdfe419940c2e4d9c9c1dfddd5266c5d377b2219cc34d76b37938655b4dadd03c7163","ssdeep":"","tlshash":"1d4112558181af7a9ed7833c53b808d636d2cda6d53092e82cfb3527e52d8d044acbe6","first_seen":"2026-02-25T01:57:21.434048Z","last_seen":"2026-02-25T17:48:30.315571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/favicon.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:06.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdPBrGpoYT4ThQfm0dXNgUa4tvUPDPDUU9WcUoSbnESW9tJFO64o7VDL2lqOM7En0HNPAiaIBYQhJcAwIjztvZ%2FZzfCMBFVYmNhrKys%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 17:48:06 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6994ca70-15c\"\r\ncf-ray: 9d39081d7aff0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfd435b705199538eed6ca14de6022f7","sha1":"c05bda2ea6dcc3e1531bd4e0f6ddcde715fb27da","sha256":"ab98fcd16b5aa9638d97f603f6e88bf02b2d69d32f453fafe4aeb362a588f814","sha512":"929899b8ac690e859b5b7a2783e17ead3365bb2452da2d2e25656c43d739c5389c43ccd3442e66ebe01e77b7f55ce0f5e93121d8d76ae4767e64878e447adace","ssdeep":"","tlshash":"22e026f0c15c8108955906018fac3960557e52e7939a45deba801c60bf1a6af9cbb7de","first_seen":"2026-02-25T01:57:21.460773Z","last_seen":"2026-02-25T17:48:30.316676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/100/small/Stellar_symbol_black_RGB.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 16:28:59 GMT","end":"Mon, 30 Mar 2026 16:28:58 GMT"},"fingerprint":{"sha1":"18:95:48:2D:EC:1E:42:16:50:86:DF:CF:8D:71:2F:91:63:3B:1C:57","sha256":"69:6E:47:30:BC:A0:BC:C3:7D:63:F8:2A:CF:33:E9:73:D2:CB:78:6E:8B:59:2A:AB:72:8F:CC:EE:53:E2:4C:83"}}},"request":{"raw":"GET /coins/images/100/small/Stellar_symbol_black_RGB.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1034\r\ncf-ray: 9d3908112c858deb-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1496\r\ncontent-disposition: inline; filename=\"Stellar_symbol_black_RGB.webp\"\r\nlast-modified: Tue, 12 Mar 2019 02:02:41 GMT\r\nvary: Accept\r\netag: \"74d83ebdcc8a2c34cf914be014efea7f\"\r\nx-amz-id-2: DR7XqPmTRcMBiyb58g7Z/0VInArRVHdMeMTVs0iKUeq9avdra8O9sdzuyRdsEi1DfFE+M+ya4fc=\r\nx-amz-request-id: QRZZTACZB7269P3X\r\nx-amz-version-id: null\r\ncf-cache-status: HIT\r\nage: 57072\r\nexpires: Thu, 25 Feb 2027 17:48:04 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c4c507c38e3106c5726814ec5dfe920","sha1":"4386a18a518c144352c083d75ea2c77041861e5c","sha256":"bc06deb99ca2dca85a56a121517dedbf8959737a773116bce8ebf83fcede2558","sha512":"2e704b4771ec3a2dda6977f333f154a50696e05d385c3abcde4a4100fd39855c118fff254e8a1aa824268ecd5a4266013473d5729977f53bbff0d4415a81626d","ssdeep":"","tlshash":"e211d5326012c30768c9f98b3a50f778e9ace81506fc307fa68303804ed8541e3c7239","first_seen":"2023-06-16T18:21:31Z","last_seen":"2026-02-25T17:48:30.317821Z","times_seen":6,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/icons/faster-payments.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/faster-payments.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Pr5kZO0fTzruD9JCPnp5GJAty2h97YQ1kR%2FIMAyA%2FP2N3ERmOKjWzS6TEOBD1%2FQc5Bz1dW8xUVIXvnk2ja%2BZn1IWpPKFZ6x8b4pU2Q%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\nage: 21163\r\ncf-cache-status: HIT\r\netag: W/\"6994ca70-cc\"\r\ncf-ray: 9d3908110d790cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96eabb9bb96d0f8000d9a170d9525c43","sha1":"7a0a3225870b65ff054f65a174cdab33a27e9c70","sha256":"904a85910407701668af0fd1882fc46bebe752a799589348f4c2126512a1783a","sha512":"48f334ee0a7cfa9051df4f631efdd0e14a4367a9d0b3758c846ecec321c4e26ff3e52c16e8f1488c23b85fce2e9dd8cc0e63a69c0af22920c6ba4c34d2bf81ab","ssdeep":"","tlshash":"18d02272b2ac840cc20483091b38a0a410f2f4c9c2400385fec4a6091908ae77c7a1dc","first_seen":"2026-02-25T01:57:21.439415Z","last_seen":"2026-02-25T17:48:30.318466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/6/6d/Bancontact_logo_2021.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/6/6d/Bancontact_logo_2021.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: o1x7fu7kifuqcjgy7ijf1ac4g3hxvnj\r\nlast-modified: Tue, 27 May 2025 20:07:18 GMT\r\ndate: Tue, 24 Feb 2026 23:48:07 GMT\r\nserver: envoy\r\netag: W/dca8a7dc29ac6d7632b85fc48413fcfe\r\ncontent-encoding: gzip\r\nage: 64798\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=NuFySwCtjtJhTBkjA9zdBQMSAAAAAFvdHRTlxSvQFHbGzTdfYffnzvkUivEcGBLx;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\nx-request-id: 35b15ecc-8348-4da4-98c2-9969a846aff6\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4925,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dca8a7dc29ac6d7632b85fc48413fcfe","sha1":"cdeabf2c7753fb492d416eea8fe600263049bb7f","sha256":"480918bb083dd1e2cb5cd4423fca4f19cbf91562855ed260a07e988413f3d671","sha512":"f4e0041fa2108d5d4d4844162fbbd56f5dd735226a9376d49c4325d55d02aba54ee2cbc0c8f0d0e056d66999b868bb0e007703d447f043b0f036c6453c41a74f","ssdeep":"96:pN01/PwzxpKEfd5f1uXmu7kPjjfJbZ4EbXj6tf0ESebR:X0RUjr/uZtFR","tlshash":"d3a1b6fa9364a8f68647c35894306d2d313591ef776151881ffa6ebc2d4c8c364bcea2","first_seen":"2023-10-02T12:20:00Z","last_seen":"2026-07-17T05:18:29.384521Z","times_seen":17,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/f/f7/Nubank_logo_2021.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/f/f7/Nubank_logo_2021.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: mrkjgdu981d0dmgry4n913b7ijl6bxk\r\nlast-modified: Thu, 24 Jun 2021 09:43:49 GMT\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\nserver: envoy\r\netag: W/8773196f1e510e9320e7071c356baaa7\r\ncontent-encoding: gzip\r\nage: 0\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 miss, cp3076 miss\r\nx-cache-status: miss\r\nserver-timing: cache;desc=\"miss\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=ouq2CBZTZWAzSzdIMh6jqwMSAAAAAFvdfI8NQAI0bx7sdgAIli7-tjGxtEqqMh3R;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\nx-request-id: 49c3f9e6-b9e4-4dc6-be46-9643f061bf92\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6238,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8773196f1e510e9320e7071c356baaa7","sha1":"c2e4fc8610ec78645cac69913475d208c5a2c2e8","sha256":"aa330aa7c937172a98b5fbe69344085c08e255e1b8b5897b57a7723211c32230","sha512":"3a54f2eaa0a26fd0623d5a0500c28fd54439a789f882d9c3d40988760e511c8cd3063910f2f8ad8fb7e1731a46f07241d1d5f08cb7596862da8718b001eae689","ssdeep":"192:Vk+OqbGMlSSBqb3b/loJFPb3YWXZkqhqKwkzqK9:muGMlknA6qL5","tlshash":"18d1d78ee37644d9570c43695cb5dd0ae20a24ab9a10185cfdec1050ef15ac2bb3dbde","first_seen":"2026-02-25T01:57:21.480322Z","last_seen":"2026-02-25T17:48:30.320268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/9/98/Capital_One_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/9/98/Capital_One_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 2e4s39bo6ky7ce50ba78ilj0p83kz76\r\nlast-modified: Mon, 20 Jun 2022 21:05:01 GMT\r\ndate: Wed, 25 Feb 2026 11:55:21 GMT\r\nserver: envoy\r\netag: W/327a5c1b21def550b0201692832f79c4\r\ncontent-encoding: gzip\r\nage: 21163\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=-Ki78I9lENapKQJbPslYNQMSAAAAAFvdr71cJoCnm4oFwLegdzcPd0UAJqiuCXEa;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\nx-request-id: 700116a9-4f63-48f4-9517-44e75c570df3\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"327a5c1b21def550b0201692832f79c4","sha1":"147b8123b748cdbe6a16b10888187290e2c08232","sha256":"69d918170633be70ec4c0fd57f421ad7b70c59641580a0ee77e929964a157c96","sha512":"d5c8183133a1abb4f384b5c3f07797c392d20e9505fdfe65371080c1ed41fba0d49a684cffc48607dff0a395ffd95665d9b4f91300bb05340ed3d8fa73625b8a","ssdeep":"","tlshash":"5971ad7cc348427cad579ba89a25a1b0f74f2079b0e0e2249b6dc47031964ddd6afca9","first_seen":"2026-02-25T01:57:21.453223Z","last_seen":"2026-02-25T17:48:30.321558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/americanexpress/006FCF","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /americanexpress/006FCF HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2695\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEP61WWKZEYF46CEZ9QXH-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9ejxXhBRcf5ExzEGWQT6KQ0vMNGebPkEORPYj53jDHj7CDc259LUs9qbC6hZo6tSCvrul4mj%2FIqTUqkESjbK13RY6hibBeZnYSUva3aXOTBg%2F4%3D\"}]}\r\ncf-ray: 9d390811b8dcc725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3656,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c86a14aaebc6eeb07eb20484e179827f","sha1":"73e9d6372b6aa5c72fbf8576b294480e643d215d","sha256":"68b0d2ed6dea35b981b31fb55f55c4b6ccaaf73dfb4b42a89ea0a66b91ef9bc7","sha512":"42e3aae1a93d617137ccace51d504c6d20f38f60db6ba13489cd48e6b69da4549f7e9aefaecefcef5c04bd89f6ec23a7e572e5f29e8cce3f2be6b50eeba48301","ssdeep":"","tlshash":"667120c66190e7598d99c98fdb77aec45047509a60bad8ca4fff9bcc550f888bf10828","first_seen":"2025-11-23T13:00:43.852104Z","last_seen":"2026-04-13T07:58:59.000271Z","times_seen":5,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/icons/visa-mc.svg","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /icons/visa-mc.svg HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6994ca70-638\"\r\nexpires: Fri, 27 Mar 2026 11:55:21 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nage: 21163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MbFQ3XYM4%2Fj4ONysB9qcneqZkcbwBbnNBArrp52SkzA6v651SHMCP7fKhpbmXHKkPqxy7qGmO3w8GH%2BBe65HoPEuONLg0PEbCA1JVI%3D\"}]}\r\ncf-ray: 9d3908110d7a0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d5cd0bf840b49440d9384cc05c9ba7d","sha1":"c5390b23e9658967c7c9a8f7817d71a56441a110","sha256":"910dea47ed3d4815fd45843402539ba09b9bca8e935f40adfed9940e80f1f158","sha512":"39a05a9400d7efcd6a7ad6a0eb4ce0891c3d46e18955c21addebefad03c1d9d79ed5fe581b4d283984a99e6dc6c24da00faec9792c3590783622a6487c3e498d","ssdeep":"","tlshash":"7c3175d24bed24bc84828b09af2c64b52116b0ff63148345b33dae6a8adb8b0cd47d44","first_seen":"2026-02-25T01:57:21.51832Z","last_seen":"2026-02-25T17:48:30.323258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"changebit.org/scripts/main.js","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /scripts/main.js HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6994ca70-fb56c\"\r\nexpires: Wed, 04 Mar 2026 11:55:20 GMT\r\ncache-control: max-age=604800\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nage: 21163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xP0xF%2F7CAWp8ZdVEJwlWN4MKHVAN5ZbV2hHujBJRUfE9zXVj91UcwO3RB%2BulyRHiuV2vg4M7HsyMJxt15GtS7YekmgE6DHydZbmPhcY%3D\"}]}\r\ncf-ray: 9d3908117dbc0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1029484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4760e2aa94675dd98863c02ea665ab4d","sha1":"3bae559f308ca0d787898d90f4622107b9099ca8","sha256":"e067064357609939d1e67a090a8d985bd07b467c012cd63368ff8a7da3f56360","sha512":"a0bd73c5db36404fc9027a0c6c5935a2e5716470273c037be7270654ffc15b472de44f19526ad50ff3c19631147a55a55d2cc9330e6c9e3b1e2a9fcf2f9189e4","ssdeep":"24576:qvNH9qXoY0zsS3REI4TeXClYYYAa1/UtSeGSMesIwoTVY+xo7unaauWN2UwXCeA:qvNdqXoY0zN3iNTe/Aa1/3eGNeszoTey","tlshash":"9225944177c1b901134b4b77332a72f4e92ad9adb588888ff508bd54f0ada13fad9271","first_seen":"2026-02-25T01:57:21.45894Z","last_seen":"2026-02-25T17:48:30.324337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/8/8e/Skrill_logo_2025.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/8/8e/Skrill_logo_2025.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: s783b2vkz9uyo47zeom21jtgl5d55e8\r\nlast-modified: Wed, 19 Feb 2025 12:12:57 GMT\r\ndate: Tue, 24 Feb 2026 23:48:06 GMT\r\nserver: envoy\r\netag: W/14a60b3c123f0c1335a84ad5ee00f709\r\ncontent-encoding: gzip\r\nage: 64798\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3076 hit, cp3076 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=iTUxF8sFk8TXHFDnGZ0vhQMSAAAAAFvdSdb9cUnXXp5ls4aGQQ8mKv1_TUnxi91a;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 25 Feb 2027 00:00:00 GMT\r\nx-request-id: 37fedf8a-6d0e-44db-9ed8-3cc7a9d29e06\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1769,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14a60b3c123f0c1335a84ad5ee00f709","sha1":"f16bd3315d698dbad406bf996d1d73e3457f5b90","sha256":"327bfd884842b98ad21ceab9fe19c50e352673ada300da54b466a1fa29d102af","sha512":"317c034e61b49c11c7bd437e699e453884e347a09c3466b6464e24132339e871c0972ded9c67eed1de5db34cfeee3cce82fc7393bc274996b9de9071125c5f91","ssdeep":"","tlshash":"843196979394c57da407472cdaa5304f32eab4fbf29f818cf5be16909f0b9b54800356","first_seen":"2026-02-25T01:57:21.398434Z","last_seen":"2026-05-24T03:21:52.958339Z","times_seen":3,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:05.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/spacemono/v17/i7dMIFZifjKcF5UAWdDRaPpZUFWaHg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://changebit.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 20:17:11 GMT\r\nexpires: Wed, 24 Feb 2027 20:17:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 25 Jun 2025 16:58:05 GMT\r\ncontent-type: font/woff2\r\nage: 77454\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16724, version 1.0","md5":"e5e908997a453e21f2fe41cb72e186d2","sha1":"d0c504bd8f896d39883e0ddfc81c511af526656b","sha256":"2d46bd159b53f55c41167a4f1540a074649464194fd1e416f5b4694a6c0f282c","sha512":"dd6bf730a4b16a50b0977b2d8efe865be0805da41c50aa86d39b4892c79db91f354e91b1a2ce4198e4b58e26752d4e9a06e33e9911e63f2df2e004d610685cd8","ssdeep":"384:ZRyfvfqIrJOZA3s5dQsQLR7JIWapcGsukRYRv5fpD:ZUXfNs5IRQ3zkCZ5fpD","tlshash":"8f72d0b8fe064610c2542fbf06209de1831895fe192e4f24f8aa74ac4f1715e3f117ba","first_seen":"2025-02-19T12:54:04.600022Z","last_seen":"2026-08-06T08:11:35.212574Z","times_seen":3056,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":78,"dns":1,"connect":8,"send":0,"wait":11,"receive":2,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/cashapp/00D632","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /cashapp/00D632 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 761\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPFJ2BESPAPA5NF2ZE25-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZDUJa7uYmTeOqeeXtF%2B%2FPDNjfAEqx8IPl5aiyYr%2F1aOv5ROixaqpctZMPJDCdBA0ruxdVo89rMO8p%2F6uxoZsWZd6y5909WgUsAzFPWcbmsVFos%3D\"}]}\r\ncf-ray: 9d390811b8fec725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":970,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f332d7b7d81fadc8b0264f00553dc056","sha1":"61e5fae6909662b6097f77785cce87b534026db2","sha256":"1a64c652dc5ee07498fe4dc2781a588f2dbc16618316d5560f55962dafd6412f","sha512":"e521cbb3a153a8f90791b824acd3273c77c0bbf3f2814dc28061b4a6597486cfbb90f9c299b48d7796d43ffbb74f4a9bb7c9e393d120df68e80b944b2c43ea10","ssdeep":"","tlshash":"c611ed1b5260e04c7d5fcc34ee2728a1260ff0eeb2a583d4a382c73161695e2e640424","first_seen":"2025-11-23T13:00:43.846232Z","last_seen":"2026-05-06T23:30:43.825597Z","times_seen":6,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/pix/77B6A8","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /pix/77B6A8 HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 549\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPQH1G7J10AH9BDY33NY-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcj6eM0dO76avZHDH9s%2BpAZeSYQCO5tACeHe4kdRa7L8HB53uiARVKOqP3AVYnajdXuTNd3%2FEx%2B6hSVOAX%2BBt%2F2t0yUF6D%2Fep8dEwpjgsNnnqXE%3D\"}]}\r\ncf-ray: 9d390811b90ac725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0d07209d01e5de6ae54c817c09a8f00","sha1":"95edf77828e185956c1407413d736b59ce370a18","sha256":"2affa7b262ea9d64927722397b1e2adf6b545f23e79c5fcb6582fc11573fff09","sha512":"d158bd6416e83fdaab12291a9ca5a88d00fe57a9ba7efe00ff387471cb89d7bd9010266e6f4c92b488fcc6ed4af412536487a25be3f4533df37cd7dd91c8cb71","ssdeep":"","tlshash":"61018ef91f6c148c22a6ae14bf3a50acc35ff8f8b5d081601ddfa57a1202351e247820","first_seen":"2026-02-25T01:57:21.407289Z","last_seen":"2026-05-15T16:50:29.016678Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changebit.org/scripts/w-modal.js","fqdn":"changebit.org","domain":"changebit.org","tld":"org"},"ip":{"addr":"104.21.42.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changebit.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 11:07:52 GMT","end":"Mon, 11 May 2026 12:06:40 GMT"},"fingerprint":{"sha1":"E5:0B:CB:56:74:00:4B:6A:B3:E5:81:12:30:7B:6A:6D:42:88:93:4B","sha256":"62:02:9C:BC:18:81:18:17:0C:A5:22:A1:70:00:A6:6F:B2:66:C6:20:0B:7A:B2:6B:3E:8B:CF:47:FC:FD:DF:58"}}},"request":{"raw":"GET /scripts/w-modal.js HTTP/1.1\r\nHost: changebit.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 17 Feb 2026 20:07:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6994ca70-9307\"\r\nexpires: Wed, 04 Mar 2026 11:55:20 GMT\r\ncache-control: max-age=604800\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nage: 21163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MozsmQLuA7tmCy2UmtyfLqoas3R1pWKGLLY1adpTkAxIPdhq%2FtuBJYRyKAF8CRSOn5tS%2Byy%2B5GDWVOGW2SejzeF08KY26RNSQdzRW9E%3D\"}]}\r\ncf-ray: 9d3908117dba0cf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-03T21:00:55.072731Z","times_seen":208,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"changebit.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.simpleicons.org/n26/36A18B","fqdn":"cdn.simpleicons.org","domain":"simpleicons.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changebit.org/","date":"2026-02-25T17:48:04.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"simpleicons.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:32:03 GMT","end":"Sun, 19 Apr 2026 09:30:49 GMT"},"fingerprint":{"sha1":"3B:C6:AD:43:C7:B0:28:49:44:96:B0:C8:45:78:DF:F6:EA:C5:EB:AD","sha256":"C0:ED:6D:8D:52:6D:56:3E:04:06:C9:B2:25:46:CE:0B:38:B7:57:F2:5C:C4:B2:5C:3A:52:2E:7B:D6:F7:8D:4A"}}},"request":{"raw":"GET /n26/36A18B HTTP/1.1\r\nHost: cdn.simpleicons.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changebit.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Feb 2026 17:48:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 941\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=31536000, stale-while-revalidate=604800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nvia: 1.1 fly.io, 1.1 fly.io\r\nfly-request-id: 01KJAAEPJG5H5PNKJF8T9JDRG1-arn\r\nage: 21163\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 25 Feb 2026 11:55:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1kYjd3qzOl%2FMf%2BKfvcN%2FusgDHUVI8zss4D8QX4UwSkzKJHrKiSgcsDC7rfqMEAA%2BPW5SfZhWPMy057%2FHJoFV0fxcoYYI6JeNYxCOdFYK2OdelA%3D\"}]}\r\ncf-ray: 9d390811b906c725-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f30cbf2cc5054e17e8d871fc6f923edc","sha1":"6bd08c73612d01ad67d08e1ec7744982724809fe","sha256":"0968ad4b31b0dddb8d5d5cbf188f900dd9843607f9d97a99f8663598e712a89e","sha512":"b8f05e55f26af56f7f4bcf41b2b0fbdd341e0af359103192d1ff41ed7edc2f57a65697e86d075d82736f751eb943eabe10a9771f308c859fd1a7b963053b04f0","ssdeep":"","tlshash":"1b2123c64f1041dc94d54f5bff2cbe5d265d649b6ae5c18de5eedf4940871c1d409800","first_seen":"2026-02-25T01:57:21.506628Z","last_seen":"2026-02-25T17:48:30.329552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}