{"report_id":"086f387b-7f61-4b49-ac85-7c6b1b3479c5","version":6,"status":"done","tags":[],"date":"2026-04-21T09:40:57Z","url":{"schema":"https","addr":"pearlexchange.xyz/","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pearlexchange.xyz/","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"title":"pearlexchange.xyz/","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"pearlexchange.xyz/","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"172.67.177.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T09:40:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pearlexchange.xyz","ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-14","domain_rank":0,"first_seen":"2026-04-21T08:55:34.341037Z","last_seen":"2026-04-21T08:55:34.341037Z","alert_count":0,"request_count":7,"received_data":7648754,"sent_data":3132,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pearlexchange.xyz/","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34b56738d6f36b779750656f8b96f52a","sha1":"3fdebc698908c831f4fb683f76103198a866ec6f","sha256":"0d3380f96885d55d7afa4984bc9036054d18dd3ab28bcabb23394ddc4fa1cb92","sha512":"0514beb4d115ead0ecc057e7ea5624beb1a449ed82e15ef9768636b9457a2de7880b450be92c086c6fc15e1506ee2ec097c48bb0d6b742eb1e987eb369daa5e3","ssdeep":"","tlshash":"13c0128851b04d79563c24ee62744a54a5a099f85266704792fc9b57998cf850a68910","size":187,"data":"","first_seen":"2026-03-23T18:50:40.575769Z","last_seen":"2026-04-21T11:24:57.425992Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pearlexchange.xyz/","date":"2026-04-21T09:40:34.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pearlexchange.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 21 Apr 2026 09:40:34 GMT\r\ndate: Tue, 21 Apr 2026 09:40:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-04-21T16:24:18.911095Z","times_seen":4042,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":177,"dns":1,"connect":17,"send":0,"wait":42,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pearlexchange.xyz/XNJYwuOy.php?s=%2Fipfs%2FRehNIfkWAVxarO8odtS9hAf6bd4b612026a425e3d3150ec076b11a%3Ft%3D1776764434254","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pearlexchange.xyz/","date":"2026-04-21T09:40:34.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pearlexchange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 15:44:08 GMT","end":"Mon, 13 Jul 2026 15:44:07 GMT"},"fingerprint":{"sha1":"92:46:5F:79:34:1E:23:16:F9:D8:06:E8:1F:09:2B:92:69:CB:19:29","sha256":"99:AC:11:45:04:6D:10:1A:F1:56:DA:7B:4D:75:AB:FC:49:1B:D2:C7:39:D9:D7:94:78:CB:1B:13:73:12:B2:8C"}}},"request":{"raw":"GET /XNJYwuOy.php?s=%2Fipfs%2FRehNIfkWAVxarO8odtS9hAf6bd4b612026a425e3d3150ec076b11a%3Ft%3D1776764434254 HTTP/1.1\r\nHost: pearlexchange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pearlexchange.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYsNROuvww9X4eRxdTqjlTUSEli1498fM9zrVnq%2FiFRgzAdxqcsXJyJePE079cF7jQ0HTAF78Wf0%2FOkPxcg%2BLSFBP8lmnRIzL%2FFYCj6HGTxfQ5y936OkA0z%2BOXYY0mmESW0qJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.30\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: text/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Apr 2026 09:40:35 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9efb6d924eee120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":622847,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6a2b9c893955ebf1d28c6deca6f5e9db","sha1":"d2cff7ac37ca365ffdd1df8246a880e537b16403","sha256":"cfc4e8a915fd9eb7ce102319178dba8e0132529ad56c1250eb31033cf329c527","sha512":"45e9346b82148dca4bf750bad70eb1033feed10c0f26736d7cd4b62ce1b6e140787cb611edf598dc3b683d10e6a6d079bbfeb99889c344a614ddfd52f09f7c58","ssdeep":"6144:Ih5gDRAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osRAnXwRTMP8chPc730WW","tlshash":"cbd4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-04-21T09:40:59.392893Z","last_seen":"2026-04-21T09:40:59.392893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1337,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pearlexchange.xyz/logo.png","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pearlexchange.xyz/","date":"2026-04-21T09:40:34.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pearlexchange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 15:44:08 GMT","end":"Mon, 13 Jul 2026 15:44:07 GMT"},"fingerprint":{"sha1":"92:46:5F:79:34:1E:23:16:F9:D8:06:E8:1F:09:2B:92:69:CB:19:29","sha256":"99:AC:11:45:04:6D:10:1A:F1:56:DA:7B:4D:75:AB:FC:49:1B:D2:C7:39:D9:D7:94:78:CB:1B:13:73:12:B2:8C"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: pearlexchange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pearlexchange.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10902\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 08:55:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 14 Apr 2026 16:47:30 GMT\r\netag: \"2a96-69de6fa2-e599d5e1a3b0532;;;\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Tue, 21 Apr 2026 09:40:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SaVbKaBoTyVEIoSC2sspKjXEh%2BBQHn%2Bu7o6r88mXdvhTCzPwi9r7vOa5odFoH9lwHBh6mBa1XjaRAdZ%2FYqOWkTkE2IIQR5qmpbN1O%2BoGtZyN1%2Biqc7M8YTc%2F5xkqGly1AlNQw%3D%3D\"}]}\r\ncf-ray: 9efb6d924eed120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10902,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8556e70f3d5f2e56d71ce47b4d776c6e","sha1":"95c127b461016cb16fb4310b5ffc3d6ffaf7e75e","sha256":"f1994198d45d3de55789dca1999f527709ac178a591a4747ba8166a554f3a1db","sha512":"a3195ef0286121b98776c33631e7b5398e3c546022fcb10d063d6f6f1d6e0996ceabf3c3f3caffb78e3795920e8a04ed3c8da0b8e3472a621cfd6beeebf0574b","ssdeep":"192:sRqei3CAit5Ypg0ztG3humFDFiva1QP+So7Qu9JKF+yzrW2c:s43AT003humx2a5SSKcyzNc","tlshash":"d4229f2763641fd9c4ec22ba3bc08773b103fc9c87c7652a98d22c3d67398a1799850b","first_seen":"2026-04-21T08:55:38.361966Z","last_seen":"2026-04-21T09:40:59.395761Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pearlexchange.xyz/kze7avf4hx.php","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pearlexchange.xyz/","date":"2026-04-21T09:40:34.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pearlexchange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 15:44:08 GMT","end":"Mon, 13 Jul 2026 15:44:07 GMT"},"fingerprint":{"sha1":"92:46:5F:79:34:1E:23:16:F9:D8:06:E8:1F:09:2B:92:69:CB:19:29","sha256":"99:AC:11:45:04:6D:10:1A:F1:56:DA:7B:4D:75:AB:FC:49:1B:D2:C7:39:D9:D7:94:78:CB:1B:13:73:12:B2:8C"}}},"request":{"raw":"GET /kze7avf4hx.php HTTP/1.1\r\nHost: pearlexchange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pearlexchange.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdjMDquq60XqrniHCLn9bG%2BJCnCnwwG2CNBLpSIbCfbshZawXRr4RzHn2BKXmvS%2F2hjoHw6s9linXPElsL2mde4ZF5eo8UCYoqVAQGp9tFDqi27G70%2BQTn2uTv%2FCxjN%2BV1iD3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.30\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Apr 2026 09:40:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9efb6d923ee9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":227966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56074), with no line terminators","md5":"188288ee82c8e000463fd33667b6f3eb","sha1":"b1f2b160bed360d0f85898ef1f4062f2eb024f23","sha256":"0aace80d97d9038ef59781157ac609882d8385724997061516aebfe0d8a3df43","sha512":"c329c390c51383fcfe6a8ec1dbf5e8d6d6cd9e30cb8cbc1b2bc8e7a96651ffc9875f1e8a36d9eb8d7f9f652cfa750c4791daaeb7c8135ea1ea0a9ff2f27f5caa","ssdeep":"6144:LYcAZYcAUrTHTAWNKmKgBtO9VBWVmBthSOSe:LcDrTAWN3KgBtO9VBWVCSje","tlshash":"7c24d566dbe740cd8f65244ed4b3b98ed4918d11ce48a563ee3ecdc23502ad9c1cb26e","first_seen":"2026-04-21T09:12:50.90296Z","last_seen":"2026-04-21T09:40:59.397237Z","times_seen":4,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pearlexchange.xyz/peak-web-v1.1.min.js","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pearlexchange.xyz/","date":"2026-04-21T09:40:34.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pearlexchange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 15:44:08 GMT","end":"Mon, 13 Jul 2026 15:44:07 GMT"},"fingerprint":{"sha1":"92:46:5F:79:34:1E:23:16:F9:D8:06:E8:1F:09:2B:92:69:CB:19:29","sha256":"99:AC:11:45:04:6D:10:1A:F1:56:DA:7B:4D:75:AB:FC:49:1B:D2:C7:39:D9:D7:94:78:CB:1B:13:73:12:B2:8C"}}},"request":{"raw":"GET /peak-web-v1.1.min.js HTTP/1.1\r\nHost: pearlexchange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pearlexchange.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 703670\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 08:55:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 14 Apr 2026 16:47:36 GMT\r\netag: \"2ff00c-69de6fa8-1a73e7154e581797;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Tue, 21 Apr 2026 09:40:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAFH5Esoql8dwSQhZuguQVfOLGmn4LDdn%2Fx%2BWd3qbAqNGtyKA4OdfKlqkRpzEcqwRde3my0KE5gqAS4cLemf78VK8hb3xHyj3Rn0aQvcL1QB%2BoQAnyLNRfD6cCRU2rEl0RvWUw%3D%3D\"}]}\r\ncf-ray: 9efb6d923ee5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3141644,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d4361c4594028e558dd1cf8179197628","sha1":"b95a8533c096133d45a1a668771faba20c4eeca6","sha256":"8e3bf54ca59e05406739923bc0bd2ee4c4e684d639dfdbec99b71f73f3c1775d","sha512":"4f6aa5d6fc523ea031441653ac72f42ac32d6af6d0665b205a19050987b8ec346140f609ff4f05aa5276f237a7c852d69812a10bce7fddd57cc183debde37b40","ssdeep":"24576:wk0rDJewJrjbrLTbb3bO0hVSE+nM7Dk+SS+u66OKXDLHMYBrR0BRPGk0VJFgfgUr:2TXu4Twb7tk4Zwm","tlshash":"66258413a2d038d251d75fb1b62350daec2d4bafb58c9afa998cf830bce1054e5d8674","first_seen":"2026-04-10T06:42:52.423173Z","last_seen":"2026-04-21T11:24:57.416633Z","times_seen":23,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pearlexchange.xyz/","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T09:40:33.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pearlexchange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 15:44:08 GMT","end":"Mon, 13 Jul 2026 15:44:07 GMT"},"fingerprint":{"sha1":"92:46:5F:79:34:1E:23:16:F9:D8:06:E8:1F:09:2B:92:69:CB:19:29","sha256":"99:AC:11:45:04:6D:10:1A:F1:56:DA:7B:4D:75:AB:FC:49:1B:D2:C7:39:D9:D7:94:78:CB:1B:13:73:12:B2:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pearlexchange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 09:40:34 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsvKxzqE%2B9c1k%2BqTDFfyNfx86YNhjhBWoyfm0mBSeSd60x029hGguHXozIcoC3fv7OTO0fO10FC6a%2BKz0dn8FJV5zL%2FumFHa8C4Z8Zxz6QAkVdMr1B3Xe4tw2IAnFJB8xtFMOA%3D%3D\"}]}\r\nlast-modified: Tue, 14 Apr 2026 16:47:30 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\ncf-ray: 9efb6d90ef124c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47015,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (324), with overstriking","md5":"cfddf95af541c6ea9963368ac411c34a","sha1":"fdff0c2aee35d138e85999d3daae237545392455","sha256":"c952e4441409fea2dfd05bd5cb7ee9677d168cd422c74b6d4b4b0ebba2fd72e3","sha512":"d0307d23b63d504d3f36e81824469615da817a21e66c53d1afffe03068e99f0617a032f9b47d579ebe944804c10e70afc25a7f152b96b7a5eb5b9d2c1a1bca98","ssdeep":"384:gbC7uj5RmIP7588zv/wlelbNX/PjU4QF4LHwKatkbOQNx8fTW4xSbsji:gbCSjbmIj5Tzv/gwLxadfawvi","tlshash":"5a23969b67f31631781b91b52beb675a3760c013c50ec9783eec42984f89aca9c6374d","first_seen":"2026-04-21T08:55:38.347876Z","last_seen":"2026-04-21T09:40:59.399591Z","times_seen":6,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":118,"dns":107,"connect":1,"send":0,"wait":65,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pearlexchange.xyz/plotly-2.24.1.min.js","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pearlexchange.xyz/","date":"2026-04-21T09:40:34.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pearlexchange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 15:44:08 GMT","end":"Mon, 13 Jul 2026 15:44:07 GMT"},"fingerprint":{"sha1":"92:46:5F:79:34:1E:23:16:F9:D8:06:E8:1F:09:2B:92:69:CB:19:29","sha256":"99:AC:11:45:04:6D:10:1A:F1:56:DA:7B:4D:75:AB:FC:49:1B:D2:C7:39:D9:D7:94:78:CB:1B:13:73:12:B2:8C"}}},"request":{"raw":"GET /plotly-2.24.1.min.js HTTP/1.1\r\nHost: pearlexchange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pearlexchange.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5a79SCrLB5EkpfvahifU6C4nE9vbFfgeK1bK2SV%2Fzvr%2FGIbGFxFfnZII8S%2FjPwnzyKlXvc6PCp8n4%2BNarEfQYS79%2BdukuMFkgDC5SW15im5OOAfrw3sXRYQgPfFMxIhNSiZ1Gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 28 Apr 2026 08:55:08 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Tue, 14 Apr 2026 16:47:36 GMT\r\netag: \"3354ed-69de6fa8-e903cbfd846aa935;br\"\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Apr 2026 09:40:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 2725\r\ncf-cache-status: HIT\r\ncf-ray: 9efb6d923ee7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3364077,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"85c8fdbc4f7a600b9ca0ed7ade91c3c8","sha1":"0535307f5b25cb55333138b9716116d456d3a259","sha256":"4dc0351b17f9b5379d632404496301a5a0157f55057aad41b40e43ed033674a4","sha512":"7cf552b16148fb5ee6c31774024e327ea52ead742d1a86a1d66dd43fb45c7fdbbfb9a608ab716a203ae1f7181cbfb8d95d1e0b5869c64e1be01b6839fc8721f1","ssdeep":"24576:u0IU6Z8C8gqYnEbI+FY8CjCJCwCVCA9zpWJLCwCiCPCOC+SDIfj41JWoUT9FusN+:QZ8IfK64Qw0Rtod","tlshash":"a225c503a2d0386604d35fb67a2750daec2d8bef618c6ab9b54df834b8e4154d6ec770","first_seen":"2026-04-10T06:42:52.428509Z","last_seen":"2026-04-21T09:40:59.400635Z","times_seen":13,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pearlexchange.xyz/x3mrmin0i.php","fqdn":"pearlexchange.xyz","domain":"pearlexchange.xyz","tld":"xyz"},"ip":{"addr":"104.21.72.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pearlexchange.xyz/","date":"2026-04-21T09:40:34.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pearlexchange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 15:44:08 GMT","end":"Mon, 13 Jul 2026 15:44:07 GMT"},"fingerprint":{"sha1":"92:46:5F:79:34:1E:23:16:F9:D8:06:E8:1F:09:2B:92:69:CB:19:29","sha256":"99:AC:11:45:04:6D:10:1A:F1:56:DA:7B:4D:75:AB:FC:49:1B:D2:C7:39:D9:D7:94:78:CB:1B:13:73:12:B2:8C"}}},"request":{"raw":"GET /x3mrmin0i.php HTTP/1.1\r\nHost: pearlexchange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pearlexchange.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVfyGyqfbWoFhLvCZs4PjdJgnaTuO4fv0j2tJpCGS5Ew5EbCZ44y3Jjjz%2Bpe0cwfqCQUxJ5ZES1VWXrK31w0BW6cgqNu88ahMMSd4jVxr3hjG%2FRP8GU3NSMH18ao8%2Bk%2FsZSETg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.30\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=3600\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 21 Apr 2026 09:40:34 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9efb6d923eec120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":227965,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56072), with no line terminators","md5":"a899a0b24a6cf16d9aeed89bf3905190","sha1":"bbf7702c197fac0ae7fa052c4b4d49b13b2f9d3c","sha256":"909e37ba54d5076006cbe89301c977b7e21123e377b01c689d03fc36b4f11317","sha512":"8ebefa4e178f190b965728c1a6bbb61b074b43252c79b2b699626569525f159340fd9383724e1ceac552bb70c93e88d75ba40e27cddbcc3ebbca287b049a6790","ssdeep":"6144:XYcAZYcAUrTHTAWNKmKgBtO9VBWVmBthSOSe:XcDrTAWN3KgBtO9VBWVCSje","tlshash":"a824d566dbe740cd8f65244ed4b3b98ed4918d11ce48a563ee3ecdc23502ad9c1cb26e","first_seen":"2026-04-21T09:12:50.90483Z","last_seen":"2026-04-21T09:40:59.401829Z","times_seen":4,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}