{"report_id":"0aa93487-c483-43c8-b332-ab2f6fd504cf","version":6,"status":"done","tags":[],"date":"2025-11-04T14:17:04Z","url":{"schema":"http","addr":"apexexchangesecurity.com/","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"apexexchangesecurity.com/","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"title":"Apex Exchange \u0026 Security - Best Trading Platform","dom":{"size":719,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (719), with no line terminators","md5":"bfcc79ec2e1780d9707ad61e9627d8e7","sha1":"0d9b591588d67e458d77ba5d4382fa67dea8b5b8","sha256":"4ad2c310bdd3259dece7d2dad46688aac1fa4ea71fa79dcf8539da0e927370fc","sha512":"8edf811453b1028f0c0c614e9a430e98c510c17c592ddfc92056e6ba6efe8378db5e6bc067aa9073a5eed26feb7d6da50e7f661fc256645828fa5ca9ebfd074f","ssdeep":"","tlshash":"ab0197b33608c8ab33518dc3f8e031a8a04ea14fad584c718d8b427bda607f00d3f61a","dom_hash":"domhash1dd8e3179d8191d8c3db88b3cd44f597","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"PGh0bWw+PGhlYWQ+PGxpbmsgcmVsPSJwcmVsb2FkIiBhcz0ic2NyaXB0IiBocmVmPSJodHRwczovL2NvZGUudGlkaW8uY28vd2lkZ2V0LXY0LzFfMzg5XzAvc3RhdGljL2pzL2NodW5rLVdpZGdldElmcmFtZS1mYmQxZDZiODc2MTJmYzQ1YWIyNy5qcyI+PGxpbmsgcmVsPSJwcmVsb2FkIiBocmVmPSJodHRwczovL2NvZGUudGlkaW8uY28vd2lkZ2V0LXY0L2ZvbnRzL211bGlzaF9TR2hncWszd290WUtObkJRLndvZmYyIiBhcz0iZm9udCIgdHlwZT0iZm9udC93b2ZmMiIgY3Jvc3NvcmlnaW49IiI+PGF1ZGlvIHByZWxvYWQ9Im1ldGFkYXRhIiBzcmM9Imh0dHBzOi8vY29kZS50aWRpby5jby93aWRnZXQtdjQvL3R1cnVydS5tcDMiPjwvYXVkaW8+PGF1ZGlvIHByZWxvYWQ9Im1ldGFkYXRhIiBzcmM9Imh0dHBzOi8vY29kZS50aWRpby5jby93aWRnZXQtdjQvL25vdGlmaWNhdGlvbi1zb3VuZC5tcDMiPjwvYXVkaW8+PGxpbmsgcmVsPSJwcmVjb25uZWN0IiBocmVmPSJodHRwczovL3NvY2tldC50aWRpby5jbzo0NDMiPjxsaW5rIHJlbD0icHJlY29ubmVjdCIgaHJlZj0iaHR0cHM6Ly9jZG5qcy5jbG91ZGZsYXJlLmNvbSI+PC9oZWFkPjxib2R5PjxzY3JpcHQgc3JjPSJodHRwczovL2NvZGUudGlkaW8uY28vd2lkZ2V0LXY0LzFfMzg5XzAvc3RhdGljL2pzL3dpZGdldC5mYmQxZDZiODc2MTJmYzQ1YWIyNy5qcyIgYXN5bmM9IiI+PC9zY3JpcHQ+PC9ib2R5PjwvaHRtbD4="}},"submit":{"url":{"schema":"http","addr":"apexexchangesecurity.com/","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-09T14:17:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2025-11-03T04:54:27.189615Z","alert_count":0,"request_count":2,"received_data":25303,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"apexexchangesecurity.com","ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-04-10","domain_rank":0,"first_seen":"2025-11-04T14:17:07.40324Z","last_seen":"2025-11-04T14:17:07.40324Z","alert_count":61,"request_count":61,"received_data":4358280,"sent_data":31937,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":4,"received_data":153612,"sent_data":2283,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ws.coincap.io","ip":{"addr":"172.66.146.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-17","domain_rank":3054346,"first_seen":"2018-10-16T14:52:10Z","last_seen":"2025-11-01T17:48:31.812745Z","alert_count":0,"request_count":1,"received_data":242,"sent_data":844,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.tidio.co","ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2025-11-04T04:41:03.392909Z","alert_count":0,"request_count":11,"received_data":1626110,"sent_data":5241,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2025-10-29T02:06:36.279747Z","alert_count":0,"request_count":25,"received_data":96513,"sent_data":12304,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"socket.tidio.co","ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":107322,"first_seen":"2017-11-23T13:17:52Z","last_seen":"2025-11-03T04:21:33.720747Z","alert_count":0,"request_count":1,"received_data":795,"sent_data":750,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":2,"received_data":16804,"sent_data":1060,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.cryptohopper.com","ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-09","domain_rank":1263380,"first_seen":"2017-12-20T12:36:53Z","last_seen":"2025-10-31T03:59:57.920793Z","alert_count":0,"request_count":2,"received_data":54898,"sent_data":1021,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"static.cryptohopper.com","ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-09","domain_rank":0,"first_seen":"2021-05-14T04:16:20Z","last_seen":"2025-11-01T17:48:31.871482Z","alert_count":0,"request_count":3,"received_data":56382,"sent_data":1499,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-02T22:15:46.374949Z","alert_count":0,"request_count":1,"received_data":786924,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"apexexchangesecurity.com/","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d36a44f37f875a535eb8ffaaeaf3ba34","sha1":"2ee474a004a3703481b6aed6bd022205884a72ac","sha256":"f6782a2413739942ae703472e0fa4bfc5d19b1d3bd9b1335f3a480c97814a8b8","sha512":"d354adf5174fae987a962e8bc33a6d63f96a9baa747d4c665dd4f5340e92b2ab675d05d75507b050731871dd0f3c3e8a3da6b747f2b09fe7d20bee1d9062a597","ssdeep":"","tlshash":"55b0120c5034b4bc121e101c9f833981903d40e841202d18f2c405160f41406030c141","size":94,"data":"","first_seen":"2024-06-29T23:19:03Z","last_seen":"2026-07-27T09:50:26.936437Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/v1.0.1/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"967881e065c4aa0b6fe543676792f033","sha1":"310f4f6458514defeed392bffa9bb95a7a31a539","sha256":"7cd509a09d5929c266a12f484c94e00e003d9c5286c83430c155fc2759839496","sha512":"5aebb4d6b97ac0ed67a45c1c244fb75d18ddeb167e23df6f506cf08c4e53517d44d84bfb0edbe9a895502d9485c6693935d6c2dcd8d7c9f0ecc8c74b6858e98a","ssdeep":"384:GzCKMPZATN09o0mtmwfEXZb5TZ8dDsSCnfwj:GVMhAh060smwcX/T2dqa","tlshash":"21a2c76921b3003a49531265efff161c607a02b78004ec24bfaeddc2cf959e98aa77d5","size":23087,"data":"","first_seen":"2025-07-03T01:31:39.072952Z","last_seen":"2026-07-27T09:07:40.766278Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/jquery-3.4.1.min.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f832e36068ab203a3f89b1795480d0d7","sha1":"2115753ca5fb7032aec498db7bb5dca624dbe6be","sha256":"4c24dfd28784ad2befb3dafaac6bf1ed4e7cd58cce713d9a0b228d426e812baf","sha512":"b9dbc08c984ae3c7fd44822ec2e9a22cb8cf7da55fa3975dbbdc3f18fd7e7a7793e8d93604826574e3dd6a4f982d7af4f96c1af5e10d847b8394a34a82c398ba","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"b28319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88144,"data":"","first_seen":"2023-03-07T01:24:01Z","last_seen":"2026-07-27T09:30:13.122724Z","times_seen":12902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/purecounter_vanilla.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a337c9af93cd71a7a9517921879be5ec","sha1":"077f79d84527d7c449112df06d047565553c6594","sha256":"6b68e5ade742f1c41e98d4a7052dcfa69de8a5961c32144adee15091099060ff","sha512":"33ba2d92270980d9fbf7cb99a2f18b3b1f1b9d3f11c37211c34590d9dfcdce87105d1807bef2930aff45b46dfe9ace5183d6fbfe4712c2a4de5ac5654b4c1241","ssdeep":"96:iRrPh640rGYBDCp3oPgonzvMkdJz7zxCrO6U006NEukUHCcx/puPsO5OworU:iRzMfFxCp4PgcMIxC46iPUiy/puPsO0S","tlshash":"5cb1b6897283f0b6c77750a600ef5207b678a561141ec550c16af8d43dbe6bbc313f6a","size":5409,"data":"","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-07-27T09:40:14.478463Z","times_seen":792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/fslightbox.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bcb8b6014f33fc9b76d313137f93c8c","sha1":"167b1e36379227a2fa7c635269bdcb0ed8dec4c0","sha256":"77ba0f0971a262f3fe1999d37208a8a7ffa1f2e563d4437bd03b1866a2219749","sha512":"8eb611d5c1bbc30ab697eb8d1fe5d7175f218cdfa3f0c0633363cadbe7d5fe70081cac6aa60e3bf6b39614ec53a429f23cc65e1808be7830311f2af34f393246","ssdeep":"768:x1g+tzeuLaIUfh7VOXqqI09lgHZQLaTVzrpGrav4diKk1CAw5S+EXMm6u:x11tzeuLaIUfh7VOXqqI0XgHZUaTVnpp","tlshash":"50d2f76a7724353881cf119fa06fdb0f237650a2ec0f6445d51ed8e5acb6c6a02a7f8d","size":30524,"data":"","first_seen":"2023-08-06T16:50:10Z","last_seen":"2026-07-27T09:07:40.793075Z","times_seen":1320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/toastr.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbf1260fde6ac3c7d16e4368b2af093e","sha1":"310a3630720dc88eb192da726cdf9fdb540a0803","sha256":"baefedb200a67117ed40391d7502f2bb5edee9de5d775a9bfce518e3cc749bff","sha512":"e0dff23ecabca3071a3b99c4c7ceb95419fdfed7cc3ae73c34de4044468a1f225a7fcbfb8ca7fefc58ba5900f57dcfe77d9993782498668ea39dec227ec24830","ssdeep":"96:ROtzIADXVID/LMpDRAD7tTQufnX5NqgWtdQK69q8OOGOlMixHCh6AYwDjOot:RgTKMAVQuPpNqgoWjrpG9ACRYwDjOot","tlshash":"6d42a6452912a3618dfb73ac9a87900cfb76a323858956167d7c83d8af30614d2f2fdc","size":12633,"data":"","first_seen":"2023-10-18T19:09:36Z","last_seen":"2026-07-27T09:30:13.22911Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/js/script","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8499c3b86de4df25542c2f9f78d8a79c","sha1":"3942a2674cb09241e3598eb3d6403e3d2c2b09ff","sha256":"d67aaeb25ce9e34bdc18b2d3ba099086b1c3e5f3cda04edebcb14f826e5a78e4","sha512":"2a7103879757369f94970215e8e1d51255a567118cdefa1147396499dfe093175ddd63b579e790d1df3d4c2dd4ff4043ebeccd917124c6635654adf928d6daba","ssdeep":"768:DPFqnpKxIFoN7jGS9yp8TaA/ME0pwKfID8gXATtIpEmR7/7Scrni6NFDjdmyXRs0:RqnpKxIFoN7jGoaAUEyTOPncyXRsYxuK","tlshash":"54c20919f640b4bb027762aab43f5316326779e676020450a06dd9f17efcd882337f6a","size":26729,"data":"","first_seen":"2023-03-08T06:37:48Z","last_seen":"2026-07-27T10:10:04.412046Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/custom.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8adda41789a33dcdcecba4f0f498b786","sha1":"584f54be52b3f1435c4596de8fcfffe150285da6","sha256":"2f2f54be4c4ad3f6b5d16bcb89623e367ce03624ebf26ceb82476567633d51a9","sha512":"d838ee08db5de68a1e839d697ffe733014d40a49e6921719888eade3a05848f6583fd3dd1955cb0c3015d9fa05cdaaa3638168c296c4e7e6f83fd551201255aa","ssdeep":"192:cYZMn4UyWe1yDMAtS2NjmM0dicieym8GHm+dgfqzfsweGQQrvZm:cYZMnrvK+MAj90dicizMgC5rQQrRm","tlshash":"4932631498751032007b717bdd9f5380b2b36047a9acbe31789e85484fa8b7e52fa7f9","size":11212,"data":"","first_seen":"2025-02-26T15:15:16.438731Z","last_seen":"2026-07-27T09:30:13.138727Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Faker/3.1.0/faker.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d17e2ab0b2e2024727069a32d78ab45","sha1":"4bda7ecf405501bf4379f7c6d6e2d0b24cf5079a","sha256":"40774939b8433bef952133fa4b8b4c9431d158c6943a4facff158846017f618d","sha512":"fec7831f155f87536f154b1c023f06b07415649bebda38c0a18b0d2fb02cd8509a1475076086ab977b110af565160ca8b953624601c879bc8b2a3a6077548b0f","ssdeep":"6144:7/GA5hMMq6jo2aXZsydaiIXsVd0sQwGF1F3PKJvDQ+mzIv5UB:L5v72ZdaiMKesatAvue5UB","tlshash":"c7f4fbd35c1327364fbd13c895b7f488a179812bb4c6bd46eae1c84a321592a30e7edd","size":785897,"data":"","first_seen":"2023-03-07T23:53:40Z","last_seen":"2026-07-27T09:37:47.091029Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddccdeb9aa4874960e6ca4bb308621d8","sha1":"5cb41e8d8d3e8d4bd3f3423b6f8827024db2b9ad","sha256":"b69c1555563a432344fe66647389ede632a5f947dbb316d1b1ec3de3e1f54985","sha512":"1bd392f6889eef4e4b4bba246cb04d9505dc98da3cc24e255ebd019d918a63222cd1f35a3467873c83511ce5895342a283bc2620a93df3ddef8b3d79a46dc3a1","ssdeep":"","tlshash":"82018e09ef13309aed1aa0833f9b55101c5970478506e825718e8a6a2f92e09e0dabec","size":816,"data":"","first_seen":"2025-02-26T15:15:16.481626Z","last_seen":"2026-06-01T03:57:10.302584Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/all.min.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b250bea6c0b0d73cc1351fa5f8081db0","sha1":"26b64ab5603c10c36eaf42f611062f3400f5f72c","sha256":"fab2c8187c991c10de6cda9c90e44cc01fbfb9e26ecb646a15c600625863902b","sha512":"d9b3213a413f002cf6d5d253f3304e32031e70dc71d1ddfb34d0fcd3713192d2a229d4b37709fe2fb8bd7dd71cc3fdd5d3a80cfc305629b62642f28c74003d37","ssdeep":"6144:4TrRrD1LXoma8Ls8FkHAwEUOG9mjkkj/OBD2n7gYKf4Hy7DM6uHyAMdIv0wzPxIZ:yNsRH/9mjkk7IALKfVDMvlMdS5ML0HQ","tlshash":"fb65752cd35993bc9e96c7b5ca2134746d8e95ed71e09328a27cc5b072630dcd2dacca","size":1472375,"data":"","first_seen":"2023-04-01T11:13:04Z","last_seen":"2026-07-27T09:07:40.839063Z","times_seen":1278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/swiper-bundle.min.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-07-27T09:42:29.415287Z","times_seen":14719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/aos.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-07-27T09:44:49.741826Z","times_seen":21890,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/hp9nmatjq3d9mw8xzpr5bxa27eawfj26.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bae680b2ca6c32108dd7686fd069ca74","sha1":"cd8c2e222124bb8b495ff0232c8acb30623eea20","sha256":"e860816c8fb7f70f7d368977544453a488270292b635345fbca614d5b3984311","sha512":"c2e5b5c3d1c68c54bb08ed062cd30c4b91378b372187d2ecda9f7ba23050bae07f45552f3481158f65c92e0f5b47c7ff2cad458bc019ce9ce885528350a4bbe5","ssdeep":"96:oZemLCc54GBALTa4qc8uLetLuy/IflRN+XMydT9pKFBq4wxBG/RvPr:+Lx5P41LeEygTuMytlxApvPr","tlshash":"75d1b891319825991226c66d70bfb30632a9712d240e9194736cdcdebe38ec7814beeb","size":6275,"data":"","first_seen":"2025-11-04T14:17:18.37897Z","last_seen":"2025-11-05T12:14:35.119415Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_389_0/static/js/widget.fbd1d6b87612fc45ab27.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3ee6dd76942d07e9cdbc5708c0a7e94","sha1":"d6db809578499c384db9352aeb3d5b85ab1dc31b","sha256":"e13e2e0f67f659a4d3b42cf9c733a9a2239d3a9fcd4ac295a22990c04c320fdf","sha512":"84f4290917bd3fee1822f4633e426428dbd185efec4166c8621d9530662f68ed2f29848d45e41868f1ebf7d492bad351e87cdf1422c3d6765f314d7eab3bacb6","ssdeep":"6144:xuuK1pPehbIeTuE/h4xL6W6b/9VwTS/M+kiH01q+02/3ishg:UuK1pPehb9TY69bwTOHnk3Lhg","tlshash":"5fb407d871d2f06207f311b6407f150bb33a195a380d8450f624edeab97998ea277fad","size":501318,"data":"","first_seen":"2025-11-04T14:17:18.434004Z","last_seen":"2025-11-05T12:14:35.127132Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_389_0/static/js/chunk-WidgetIframe-fbd1d6b87612fc45ab27.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5627a5694eb4c794f594eb2e0bee3931","sha1":"cb7c700b9fa88f4cc9af13cb6e85bd8f5954c5db","sha256":"4668dfc7122849bea613e423a71738d96a3e757952c5387d3e6aece3328dcefa","sha512":"554a9725485538e7a4e41611974baa9ce0b1fe1897426766b3bd0bd7f558ab034d2dde0567f105b4f6e871ce1cd6418cf5ace849a24ccfbc8032bf8d342b25ee","ssdeep":"12288:T1UffmSSqZhMfLB9s7sI9IF2mHKP08zRz:T1UfJMd9s7sI9IF2mHKP08Fz","tlshash":"f3a46dc372c3746cbba752aad4bb540d753e345d794880a8f6bca868188a5d46333fdc","size":466510,"data":"","first_seen":"2025-11-04T14:17:18.384683Z","last_seen":"2025-11-05T12:14:35.066701Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/bootstrap.bundle.min.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80421,"data":"","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-07-27T09:40:14.33666Z","times_seen":17690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/825/small/bnb-icon2_2x.png?1696501970","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/825/small/bnb-icon2_2x.png?1696501970 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 3237\r\nx-amz-id-2: iIMoGsrqH8MNJWP9m9W//xXoLlBt4bTRWZknW6N9UIpiS3tTR6xi/ifoOiudqjpZtGkNfgJKWn0=\r\nx-amz-request-id: FR7WZ6SFW9K8PWK2\r\nlast-modified: Wed, 29 May 2024 03:02:57 GMT\r\netag: \"39e39ca433ebda412a810fd724075584\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TsP.LwF_4OUWYcdi0NPwQyxuX2JVuts1\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 4443\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkCkmEIMNCKsP0HGjb9sNTVDEDmYgmxGhgbXLzhY%2BjdCHo1Iha6FQ%2FW%2By4acZau4JsaUIRXHYZ1GAaRKHP6ATrTs3mTd1eYEN8ITg65Gb%2BFjBeFFlubB\"}]}\r\ncf-ray: 9994bb100803569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"39e39ca433ebda412a810fd724075584","sha1":"f308c2834b3d52be64a32d3fa7a4ac3ff50eaede","sha256":"c63ff571db9b48ac57b368f7d021314ed68f3bf8864504d1c144f0a4a084304f","sha512":"8851389ba624fde1654b240c7f1b37246eb763bec5bd5ebc9b055039357d49be73128d417439b8f799c8ab3b166a067a14edd9d7b3916bec7d768b3693e79bb0","ssdeep":"","tlshash":"24615dce36395969c562c1f09d9f5258fce7e619f416180edf39151abca0f8ce057322","first_seen":"2024-09-19T19:38:42.359092Z","last_seen":"2026-07-11T19:12:32.233664Z","times_seen":292,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":73,"dns":8,"connect":4,"send":0,"wait":18,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/service/6.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/service/6.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2548\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2548,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 47, 8-bit/color RGBA, non-interlaced","md5":"e981d3c1ee0c3674923f43718c867ebd","sha1":"47ab1e8dc2acfa06718168fb508f83440192d938","sha256":"44234d442c7b59b60ab0612d5acae2e511fbf8b054892e50422f8e91d07d71a3","sha512":"9cfeaae26d2310e5300c2cdbce509fc4715ea2349c0df40c4e366b4670f1292346fa71e92af48cb8cd24017c417557c3526b6d5b60df616f5b0f0a5a244f507c","ssdeep":"","tlshash":"0b515ccbcc40623cf7c718b3daa574a3d8a1be34fb56b41b3b444ac1ce350a28920726","first_seen":"2025-02-26T15:15:16.409527Z","last_seen":"2026-07-27T09:30:13.189552Z","times_seen":337,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apexexchangesecurity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43220\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:39:59 GMT\r\nexpires: Fri, 30 Oct 2026 09:39:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:10:30 GMT\r\ncontent-type: font/woff2\r\nage: 448602\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43220, version 1.0","md5":"197ad9df561892b41478b747aa2d7998","sha1":"4ed5d7fb0987ff7c4e8163ec45499c9729e49e87","sha256":"dee3a6583f4fa45f0ccb0e1879b50c96639ad59d5e5e6e73ddbe7505be07fe3c","sha512":"00e757f0a9826ecfea7d0c3567be6b5c9d4f15e875429e588b94554083484abcd3e13244215fe34c90fbd0597f9bbf1bf4d61abcf32d6dab1536ed849c9f9d93","ssdeep":"768:HaCng4UVdxLV6SO8Vx7v/4wADi1IvIwOGcDjZjgySPocr61Rjc+6sMAQeqBG:HdgXV1JjADkIvlOfZjJK21Rjc+6sMCqI","tlshash":"0113f2b79522c88e446b25fe76a71781ef8a8dd13b8f04221cbff8d42544741abef158","first_seen":"2025-09-21T11:59:02.801313Z","last_seen":"2026-07-27T09:40:14.350252Z","times_seen":250,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":183,"dns":1,"connect":20,"send":0,"wait":21,"receive":10,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/testimonials/","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/testimonials/ HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.2.34\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1098\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5340,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (601)","md5":"1a72f9cecdb740ddcc8a50212f5c8946","sha1":"c13200a5d5d3e34bcb8bb7c1e68ffb06e8dc2492","sha256":"13c9b05480fe171e318f6a34bbe95ff4971f49eec77ff40f123231852aab572b","sha512":"b206b9d4d2a8c00c2df3c52ddf2b897dfa0d0845fef81539f4a219e51e32e3adb94c92fe49122bde1396372c01cee499d219c661d9df63366d2734dd51e96cd6","ssdeep":"96:UP2A0QWKK+FeyuzGaBuh8i1KC6XiHa7T672ezTRvDWniiM1i:dQdJ8FxAGiItS67W7h3R4iiYi","tlshash":"d2b19f01b1d58027251531f4b21ebae5f2c16521c628af7eb8fc968bd7e0f70592f9d2","first_seen":"2025-11-04T14:17:18.348867Z","last_seen":"2025-11-04T14:17:18.348867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/30061/small/wbeth-icon.png?1696528983","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/30061/small/wbeth-icon.png?1696528983 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 4357\r\nx-amz-id-2: DvUl+0q4IhlDPqCGfx3tkNFfbQ4GOZkmL4rESaSKxLAadOYqWvHq3K1AzNfAsvvJdox9Az7MaOz02SOLHxTLig363cgjSwe8csHVsZq06/4=\r\nx-amz-request-id: 268R523YDV9Z2HWF\r\nlast-modified: Wed, 29 May 2024 02:50:19 GMT\r\netag: \"aa30db6a8fcd7bf4ecf8c688a7ede873\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZPPFRi.SULfnakR4gQsbgs8PNpsCTyVh\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 4874\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KaAzCeCR7r09MOu7aJQQuUIWARPZQmitMtgfmJKY2k3IfABpzE%2BkMScZSX3igRO%2FXqIMlpdCphzQWQbqueyU0z5ogk49TwMtOrmobqjkMMZ%2F7Bmp5p6m\"}]}\r\ncf-ray: 9994bb0fcfcd569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"aa30db6a8fcd7bf4ecf8c688a7ede873","sha1":"35bbba65543dcb9e5478e8746a1131e4fadfc80c","sha256":"b1b0aae3c5ced1da38cdbc836498f232867ea2003515a04db8db9060b8743362","sha512":"534513eb862da00c054f3a2fe5524d595f47d9ee7ea9f31360a4c4135c8ec9f0900dcbcf76ce16b43bdf964ff56c54fbac5eedff192e4a1b0a795c7c764b834b","ssdeep":"96:ZSg5RdAUlSm/8ipClDVI2rLZs3pfe8D0esiLt2uHcd:ZSedA8n8ipClDVIGFyfe8D7VLtZcd","tlshash":"b3918db4f3f899a1800412beb0f522a2f59d82edd872284dc21798b63531fc4ab72658","first_seen":"2025-08-05T21:46:09.206118Z","last_seen":"2026-07-27T09:54:10.854852Z","times_seen":305,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"socket.tidio.co/socket.io/?ppk=hp9nmatjq3d9mw8xzpr5bxa27eawfj26\u0026device=desktop\u0026cmv=2_0\u0026ver=1.389.0\u0026seid=07c56190-25bb-4895-a898-beaff9b90525\u0026vid=05qnpq8p3po094p1nqr0sq1r9r99o162\u0026EIO=4\u0026transport=websocket","fqdn":"socket.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /socket.io/?ppk=hp9nmatjq3d9mw8xzpr5bxa27eawfj26\u0026device=desktop\u0026cmv=2_0\u0026ver=1.389.0\u0026seid=07c56190-25bb-4895-a898-beaff9b90525\u0026vid=05qnpq8p3po094p1nqr0sq1r9r99o162\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: socket.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://apexexchangesecurity.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: bvofzHLtDy+9bKYge3D/Lg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 04 Nov 2025 14:16:42 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ScV3wLOuobMsGyGUiOvdw7wDjpQ=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0%2FbRnl%2B9ZTKVX4zekm8%2B1XyUZBpW7KRifPRH3n4t6%2FIRjtgk7Z4lhFrNx%2FYQFnGEI1fQO0KGpxA%2Fjke%2FwpoPy4p84l513mq6HalvSO%2BqllDmd4UgGAK%2BqHNAE3L%2FxoM6hw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9994bb132f3d5688-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=498\u0026min_rtt=484\u0026rtt_var=125\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3100\u0026recv_bytes=1353\u0026delivery_rate=7855334\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=8fbf62ae28f374fa\u0026ts=157\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T09:47:52.605533Z","times_seen":17560503,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":17,"connect":18,"send":0,"wait":143,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/css/all.min.css","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/css/all.min.css HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21835\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"2fd961571c270c2d63b165a97488fe95","sha1":"8922f78fc464d96eafb41f27916e97b9a12f5e37","sha256":"ff8510712984ac3ccf08c022b8e8963d556c34ddacdd963f36c99735c8f42057","sha512":"4b396bc56525a5fbb343ea5c502a2cc5c825411340abf0d98d5b02d25138d31b000ec7de428132a44f9e9f070e8868e4fdb4ae1862871328d2a10d73562b1a9d","ssdeep":"1536:hwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:d709gMGFiyPGuZpfZCl","tlshash":"2fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-05T16:51:19Z","last_seen":"2026-07-27T09:30:13.19017Z","times_seen":4735,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/partner/light/2.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/partner/light/2.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3115\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 141 x 48, 8-bit/color RGBA, non-interlaced","md5":"08acf7383f4266bfa708f56ada826765","sha1":"bdca87210e9809030e7df8a17dd9f9070b60a682","sha256":"0a9daf562f285b997f78be80ddd92618c66d135b777256ab1823ee891108fa03","sha512":"a1786f15bb9cf4ce32489bd51d5020fcf333a7aa1d920329bf88b51048338ef6731f0d3815037156fa24c6ddd02d1aceacc2d23734eae427953e74038ef9579a","ssdeep":"","tlshash":"3f514cf78a3b4dfb98a79b3f15a08a51fa6a31643294b1fe3019673c44184bc675331e","first_seen":"2025-02-26T15:15:16.399757Z","last_seen":"2026-07-27T09:07:40.762511Z","times_seen":264,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/feature/home3/1.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/feature/home3/1.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29164\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 243 x 168, 8-bit/color RGBA, non-interlaced","md5":"6ab5d197a735211d13992ecb272d9df9","sha1":"828ec439f2741ee07aa5253ee72d52cd7e4bddcf","sha256":"3548d7c5eeba4c94f146c1443e34152b3bb7e32c649df7d35b929895b0a776c0","sha512":"747473a2b23c2ee4fa6e02bff869d1c9557ac4951fd70658e8ddd3bed85d7f260c4b8a18e6b918f18739a2640d204dfcdb0c2894ea8dd3d667514b4daac6cd32","ssdeep":"768:AwNlaXtOBOoweUDyYurUdXjm4EVgglSncz:BlAORfjLrURZEV6nA","tlshash":"0bd2e1a8d6300aaea1278b40f54e51c4407eff6f2e0c107bf1dd6e11757f8b0b9a9625","first_seen":"2025-02-26T15:15:16.419607Z","last_seen":"2026-07-27T09:30:13.154123Z","times_seen":300,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anek+Telugu:wght@100;200;300;400;500;600;700;800\u0026amp;family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Anek+Telugu:wght@100;200;300;400;500;600;700;800\u0026amp;family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Nov 2025 14:16:41 GMT\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9904,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d982be98b67154dfc06bb2bcd5564ad0","sha1":"aad432f051db7301e0079a318d9fc3a85062ae11","sha256":"1ebc95ba41f105a937703c7e3f0135fc99fb53321c780e7d08aec617eedbd969","sha512":"82d5c09f33a9935296d0370dbeff6606e9de455766719834b511b80501368201dc1e82f69f6c6f7197f5a3ee501557b655435d4abdcbdcb9946be4fc0b340a3b","ssdeep":"192:2PhEPWTP/hzWGchQWRhhtWMWhiWvLhnWqohkWV9hRWQ1:2Sk0","tlshash":"9112d0a2011fe6d066c75cc226ea7d3add0f3170244694366bfe24e8aca7c335352b5e","first_seen":"2025-09-21T11:59:02.842929Z","last_seen":"2026-07-27T09:30:13.211931Z","times_seen":189,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":89,"dns":1,"connect":7,"send":0,"wait":18,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws.coincap.io/prices?assets=bitcoin,ethereum,tether,xrp,bnb,solana,usd-coin,staked-ether,tron,dogecoin,cardano,wrapped-steth,figure-heloc,wrapped-bitcoin,wrapped-beacon-eth,chainlink,hyperliquid,bitcoin-cash,usds,wrapped-eeth,ethena-usde,binance-bridged-usdt-bnb-smart-chain,leo-token,stellar,weth","fqdn":"ws.coincap.io","domain":"coincap.io","tld":"io"},"ip":{"addr":"172.66.146.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"coincap.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 13:47:22 GMT","end":"Fri, 09 Jan 2026 13:47:21 GMT"},"fingerprint":{"sha1":"69:A1:D5:69:85:19:43:70:BE:FA:D1:5D:9A:2F:71:7A:15:2E:38:A6","sha256":"E1:CE:43:26:7A:94:86:9C:5F:E1:D7:9E:43:85:BF:04:83:F2:CF:BD:54:5B:41:A1:D1:D9:ED:EA:61:B0:32:AD"}}},"request":{"raw":"GET /prices?assets=bitcoin,ethereum,tether,xrp,bnb,solana,usd-coin,staked-ether,tron,dogecoin,cardano,wrapped-steth,figure-heloc,wrapped-bitcoin,wrapped-beacon-eth,chainlink,hyperliquid,bitcoin-cash,usds,wrapped-eeth,ethena-usde,binance-bridged-usdt-bnb-smart-chain,leo-token,stellar,weth HTTP/1.1\r\nHost: ws.coincap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://apexexchangesecurity.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2HY6QfVra4DkyX2S3SI45A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 04 Nov 2025 14:16:42 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: bcrXmSdXlDUvPLHyU59fP3BSlHk=\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 9994bb103e13c272-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T09:47:52.605533Z","times_seen":17560503,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":39,"connect":36,"send":0,"wait":202,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/css/bootstrap.min.css","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28371\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":232933,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"1adbd55377a7c19683cdc5f1da06a430","sha1":"f2723ad67eb83829b5f747f85b123f21fb62dbf5","sha256":"bb773c312539d66c0bf5edea4fc8cea197952c119fe86d533426778af033fb27","sha512":"581db446146f69aab2f64df293252c0f26e2fdc56bb5968d5f6c84cdff133fbd29b35d40688056120659ed538f6e9e361c01f76f7d1fe5e0557136ec7ae24cfe","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qv9A374298wsY/ElV6V6pz600I41r:ntj898fP298uI6V6pz600I41r","tlshash":"563481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-08-19T18:45:28.750362Z","last_seen":"2026-07-27T09:40:14.397167Z","times_seen":330,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/widgets/?id=%5B%7B%22id%22%3A2%2C%22options%22%3A%7B%22realtime%22%3A1%7D%7D%5D","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 13:38:31 GMT","end":"Sat, 03 Jan 2026 14:38:21 GMT"},"fingerprint":{"sha1":"6B:56:35:9A:D8:BD:79:A5:E1:1B:CC:E1:5B:91:B3:FE:CD:44:0C:78","sha256":"DE:78:B0:AA:92:CF:50:13:B5:80:B5:42:17:8D:8B:D3:6B:57:6A:83:56:E3:77:6E:41:19:A1:01:AC:A4:14:20"}}},"request":{"raw":"GET /widgets/widgets/?id=%5B%7B%22id%22%3A2%2C%22options%22%3A%7B%22realtime%22%3A1%7D%7D%5D HTTP/1.1\r\nHost: www.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://apexexchangesecurity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 2355\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nset-cookie: widgets_csrf_cookie_name=0f7e5c928583f7335abc20b1b4d635d4; Secure; Path=/; Domain=cryptohopper.com; Max-Age=7200; Expires=Tue, 04 Nov 2025 16:16:41 GMT\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self' *.cryptohopper.com *.hotjar.io *.hotjar.com; object-src 'self' *.cryptohopper.com partners.liquid.com widget.changelly.com *.intercom.io *.intercomcdn.com cdn.paddle.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.tradingview.com *.cryptohopper.com *.intercom.io *.intercomcdn.com ajax.googleapis.com cdnjs.cloudflare.com static.cloudflareinsights.com *.shopifycdn.com *.myshopify.com sortablejs.github.io cdn.paddle.com www.googletagmanager.com *.hotjar.com *.hotjar.io cdn.jsdelivr.net optimize.google.com partners.liquid.com widget.changelly.com s0.2mdn.net unpkg.com wchat.freshchat.com cryptohopper.webchat.freshchat.com cdn.plyr.io cointelegraph.com s3.tradingview.com connect.facebook.net d.adroll.mgr.consensu.org d.adroll.com s.adroll.com cdn4.mxpnl.com ssl.google-analytics.com bat.bing.com s3.amazonaws.com platform.twitter.com cdn.syndication.twimg.com cryptohopper.us17.list-manage.com ajax.cloudflare.com www.gstatic.com js.stripe.com www.google-analytics.com www.googleadservices.com www.youtube.com www.google.com googleads.g.doubleclick.net static.doubleclick.net cdn.segment.com fast.appcues.com www.googleanalytics.com www.googleoptimize.com assets.customer.io code.gist.build; connect-src 'self' www.tradingview.com *.shopifycdn.com *.intercom.io *.cryptohopper.com *.intercomcdn.com *.myshopify.com *.shopify.com *.cryptohopper.tech *.hotjar.com track-eu.customer.io *.api.gist.build *.cloud.gist.build ws: *.cryptohopper.com stats.g.doubleclick.net cdn.paddle.com api.appcues.net fast.appcues.com api.segment.io *.google-analytics.com *.analytics.google.com widget.changelly.com api.cointelegraph.com wchat.freshchat.com *.hotjar.com *.hotjar.io saveload.tradingview.com cdn.plyr.io cdn4.mxpnl.com; img-src 'self' blob: data: *.cryptohopper.com www.google.ie *.coingecko.com *.intercomassets.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com cdn.paddle.com cdn.jsdelivr.net img.youtube.com *.giphy.com res.cloudinary.com appleid.apple.com sync.taboola.com widget.changelly.com assets.coingecko.com stats.g.doubleclick.net www.google.nl dsum-sec.casalemedia.com ups.analytics.yahoo.com pixel.advertising.com pixel.rubiconproject.com sync.outbrain.com image2.pubmatic.com ads.yahoo.com trc.taboola.com eb2.3lift.com x.bidswitch.net idsync.rlcdn.com cm.g.doubleclick.net us-u.openx.net assetscdn-wchat.freshchat.com s.adroll.com d.adroll.com ib.adnxs.com cdn-images.mailchimp.com cdn4.mxpnl.com s3.tradingview.com bat.bing.com chart.googleapis.com pbs.twimg.com abs.twimg.com syndication.twitter.com q.stripe.com www.google.com googleads.g.doubleclick.net i.ytimg.com cdn.plyr.io *.google-analytics.com *.analytics.google.com www.facebook.com maxcdn.bootstrapcdn.com www.googletagmanager.com optimize.google.com track-eu.customer.io data:; style-src 'self' 'unsafe-inline' *.cryptohopper.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com fast.appcues.com cdn.paddle.com unpkg.com cdnjs.cloudflare.com widget.changelly.com assetscdn-wchat.freshchat.com wchat.freshchat.com stats.g.doubleclick.net cdn-images.mailchimp.com s3.tradingview.com cdn.plyr.io fonts.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com www.youtube.com optimize.google.com fonts.googleapis.com code.gist.build; font-src 'self' *.cryptohopper.com *.hotjar.com *.shopifycdn.com *.intercom.io *.intercomcdn.com *.myshopify.com *.shopify.com cdn.paddle.com cdn-images.mailchimp.com widget.changelly.com s3.tradingview.com fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com; frame-src 'self' static.cryptohopper.com *.intercom.io *.intercom-sheets.com intercom-sheets.com *.intercomcdn.com *.tradingview-widget.com buy.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com create-checkout.paddle.com widget.changelly.com plugin.partners.liquid.com *.hotjar.com cryptohopper.webpush.freshchat.com wchat.freshchat.com js.stripe.com *.sumsub.com renderer.gist.build code.gist.build data: *.cryptohopper.com coin360.com coins.gourl.io platform.twitter.com www.emjcd.com cj.dotomi.com www.facebook.com cdn4.mxpnl.com www.youtube.com www.tradingview.com discordapp.com s3.tradingview.com s.tradingview.com googleads.g.doubleclick.net www.google.com www.google.nl optimize.google.com; media-src 'self' blob: *.cryptohopper.com res.cloudinary.com *.intercom.io *.intercomcdn.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com widget.changelly.com s3.tradingview.com cdn.plyr.io; child-src 'self' *.cryptohopper.com *.intercom.io *.intercomcdn.com cdn.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com widget.changelly.com plugin.partners.liquid.com www.youtube.com; form-action *;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 16015e09e0d70f7cc17ec5c4f52b310e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: pAW4fxKSzPDNr9RRiww2IqfNXHX6pEF2KAlKA7BYIye9CqpoXRCgdA==\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 9994bb0cf980b51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":16700,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3e5af4e0b69f91b0f2833939abc41a01","sha1":"9265a86475c1344c7ed6af0f7d2d2fb79b225dc2","sha256":"b7101bb350ea47b08bc6677bb3be3b7bf9464a77cf1ce75efbc6a8f3beac761d","sha512":"410e9946bc0fcc9401a4654e929fac777d2002be2149cc1e45eb26105cf5f95cd9fbd705bfaa46824e08be55465fd4468f07a240d0842e5b6809eb03071b3f34","ssdeep":"192:bxsyA+mFvAEFRUOFlwHyxmZRNNWIw3ExsxHj9+ENAIdfdsLvTAW3O1xmets5t9C3:bxsyAZOJjNA7loAY4IA","tlshash":"d272cc6075b7e0a29073d5c084bb773d38a2b21def6548a3c7ed06b947eceb83529491","first_seen":"2025-11-04T14:17:18.35562Z","last_seen":"2025-11-04T14:17:18.35562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/all.min.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/all.min.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 511608\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1472375,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"e5f88e50fddb49f2b66d2c74390a1d78","sha1":"a3b4abc02af61323bbb10fae88d959102444811e","sha256":"f71f07484a0ed8aeeebc46c508b89673c82b6ae357d695a56ec81952c57669e2","sha512":"c119b543a7b2cb16ce4c3f262df4225f18224c291dab85c9bcc203cfbc1c48a35c619317c1cd309b822461a4c4d0a0bd929642b7d4fac19dad0abdef7f04bcf1","ssdeep":"6144:4TrRrD1LXoma8Ls8FkHAwEUOG9mjkkj/OBD2n7gYKf4Hy7DM6uHyF:yNsRH/9mjkk7IALKfVDMv0","tlshash":"88256238d35493bc9d96c7b5ca2124b4798f91ee71e0a328a27dc5b072620dcd2ddcda","first_seen":"2025-08-04T10:04:47.100456Z","last_seen":"2026-07-27T09:07:40.755624Z","times_seen":1170,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/8418/small/leo-token.png?1696508607","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/8418/small/leo-token.png?1696508607 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 4181\r\nx-amz-id-2: /zQCOntNCkpm1z7xeqQ36sQ23Q18qQDDMxUDMV6A8ET8Zn7gNUQEA5s+rLhwV434Mk90991r3L8=\r\nx-amz-request-id: 9GY0XHQTKED3XZF1\r\nlast-modified: Wed, 29 May 2024 03:03:07 GMT\r\netag: \"12e75a12a7250349702c451c5bbb77a9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: fT6H7sE8Zt0Uvtic40oguM2ZsyJwQiSu\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2630\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gS2qSaPJ%2FyPayGtzK%2B2tY3vU1%2BbkVSQPOUG8OZgEagGjHEj5rZGufQGlwqE2KiCKlLB9Y9DCNl590pk8bPQK7FL6oWFGTxLh%2B1AS%2FLHpt3mwFMHGHzev\"}]}\r\ncf-ray: 9994bb0feff2569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"12e75a12a7250349702c451c5bbb77a9","sha1":"3c20d6f74f58fbd039b047dfcd4e1c3e470407e5","sha256":"1383ddea08e6382a1eefa22aaf9212eef430cd400393bfd9354d457a81e05730","sha512":"572a51949d092b5e6ea1ff608243b53f81f7a23f1a2d7f6ca96f518bc8b64fea9e2d4861ccc7b865cde07fae5119d5735150d2dfdf5ba494f14ec587264c0e37","ssdeep":"96:NinlDeSuOOVDvR5R+YObyRHDpDGPjF/kIHyLo20g2UN:NinllKVDJT+rydDwx/kIHGo20g","tlshash":"57816c4980b48738ec472d4076b27cb1cc54c2693343aeb64bd4e979fef1a56c756042","first_seen":"2024-12-22T02:31:25.261559Z","last_seen":"2026-07-27T09:54:10.923833Z","times_seen":190,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/partner/light/5.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/partner/light/5.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2280\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 48, 8-bit/color RGBA, non-interlaced","md5":"71fb19b2879b7a192bdb930958737aef","sha1":"5e64a6ce0549b9889735c43e2161c0fdb1618b6c","sha256":"f6c5b272125f6c68a05f4f72a29deb19746cf25e5e18449462cbd096ebfb849d","sha512":"d64b7a136a3369fb68eba5536faa5f1f7f35c799126194826416f0edaa98b67a77d9f0fcf3f1f7f74ca23c98559778e4cd4b919f1a469b1d455a3bd715216819","ssdeep":"","tlshash":"c3412bdd2bcc719eda3a255e6b88adfbe17c37718f8c81a0be1f589c0471b152650831","first_seen":"2025-02-26T15:15:16.404753Z","last_seen":"2026-07-27T09:07:40.830774Z","times_seen":270,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/service/3.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/service/3.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1790\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1790,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bdb32cf309f476977d5765ff52ba3383","sha1":"f6d04bf12b2d5489db26c6213eb5b96dea2a8960","sha256":"da4ce0412c4523c4e58904d849b0b2a577dabce83369df29be314b6b8a0429d1","sha512":"ab13de736144db2234db12f756280b86bdb86a178b10d2e96dcffee3200497e8454a0dacadd57d0a03038a32932d8de58449f860aae62c21b517fdfb8eaf6ae7","ssdeep":"","tlshash":"9b3109c264eaad6dae1b3c24857b2dbd7379466734a26c094d158d0f8382b8c4b18f71","first_seen":"2025-02-26T15:15:16.407499Z","last_seen":"2026-07-27T09:30:13.159763Z","times_seen":345,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/webfonts/fa-solid-900.woff2","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/assets/css/all.min.css\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149908\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149908,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 149908, version 771.256","md5":"44f8148f80e6c3d60fa6425b0cbb862a","sha1":"ec2f4e5f311462dce67b8f354e5bb9a68c12cf58","sha256":"e2c5cf547e2e8d74a17d05c5ad9f1f593ca526452e228124294fa983b908ff82","sha512":"07978f5827f0d5e9191b6970f0a01d10b88e33524c4aa3973d527ace295ee356f907c0374a430785eaabdd1ac06811c841b3da704066044f4d66fa4cc755ec8d","ssdeep":"3072:1q8xfiSXJLOvVpYQgUGUn9bymvMalSSb8S9glCb2XzMZm:A83ZLMVpYKrtPvQRSuzv","tlshash":"b9e312560a90854e7ad8c661360fef0fc28f33ea6ffff2a5e0c1fa8655dc94a2594450","first_seen":"2023-04-07T23:49:37Z","last_seen":"2026-07-27T09:40:14.449331Z","times_seen":3352,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apexexchangesecurity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43220\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:39:59 GMT\r\nexpires: Fri, 30 Oct 2026 09:39:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:10:30 GMT\r\ncontent-type: font/woff2\r\nage: 448602\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43220, version 1.0","md5":"197ad9df561892b41478b747aa2d7998","sha1":"4ed5d7fb0987ff7c4e8163ec45499c9729e49e87","sha256":"dee3a6583f4fa45f0ccb0e1879b50c96639ad59d5e5e6e73ddbe7505be07fe3c","sha512":"00e757f0a9826ecfea7d0c3567be6b5c9d4f15e875429e588b94554083484abcd3e13244215fe34c90fbd0597f9bbf1bf4d61abcf32d6dab1536ed849c9f9d93","ssdeep":"768:HaCng4UVdxLV6SO8Vx7v/4wADi1IvIwOGcDjZjgySPocr61Rjc+6sMAQeqBG:HdgXV1JjADkIvlOfZjJK21Rjc+6sMCqI","tlshash":"0113f2b79522c88e446b25fe76a71781ef8a8dd13b8f04221cbff8d42544741abef158","first_seen":"2025-09-21T11:59:02.801313Z","last_seen":"2026-07-27T09:40:14.350252Z","times_seen":250,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":137,"dns":1,"connect":39,"send":0,"wait":21,"receive":10,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/testimonials/","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/testimonials/ HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.2.34\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1098\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5340,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (601)","md5":"1a72f9cecdb740ddcc8a50212f5c8946","sha1":"c13200a5d5d3e34bcb8bb7c1e68ffb06e8dc2492","sha256":"13c9b05480fe171e318f6a34bbe95ff4971f49eec77ff40f123231852aab572b","sha512":"b206b9d4d2a8c00c2df3c52ddf2b897dfa0d0845fef81539f4a219e51e32e3adb94c92fe49122bde1396372c01cee499d219c661d9df63366d2734dd51e96cd6","ssdeep":"96:UP2A0QWKK+FeyuzGaBuh8i1KC6XiHa7T672ezTRvDWniiM1i:dQdJ8FxAGiItS67W7h3R4iiYi","tlshash":"d2b19f01b1d58027251531f4b21ebae5f2c16521c628af7eb8fc968bd7e0f70592f9d2","first_seen":"2025-11-04T14:17:18.348867Z","last_seen":"2025-11-04T14:17:18.348867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/banner/home1/bg.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/banner/home1/bg.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 736117\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":736117,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 812, 8-bit/color RGBA, non-interlaced","md5":"4a265fb97fea6939d17e7a01e39f94d6","sha1":"42cdf51ef7ff162c97b05076e72a68092e4f703b","sha256":"2b9384f97d3382c73bddc679d16d5d4b99200c8b2d9141a68d923f1d0c0df52b","sha512":"e652986d56a315df3615835551ceb388e474ef256ff65e94f9662807418a521eabc60b4445cd49cbee25ca0ce50f23104b7b09ceae28a94665c3e8a3e6aa6387","ssdeep":"12288:SLRv3uOw1TZqWLR/5h67XDShYuCJAmY90NTZVTZ5YWjGAi3TYImouvj83FQubpJu:s3rw1lqwm2TCJAn+NrTjqjmougHHOhP/","tlshash":"11f423b43724bbee50e5b1508e589fde98614c158fc6def3da3c14cd26ac7a8308532a","first_seen":"2024-08-19T14:01:31.618684Z","last_seen":"2026-07-27T09:30:13.115459Z","times_seen":319,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":439,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/279/small/ethereum.png?1696501628","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/279/small/ethereum.png?1696501628 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 1887\r\nx-amz-id-2: iC2zObjq0wczEg1BDevs0lWZ279MpB1AElib7faIUwojQEDWzCIadgBRRI+rUpSZR+JwU5Wewyg=\r\nx-amz-request-id: 0GHB1FMFBQYGQA5B\r\nlast-modified: Wed, 29 May 2024 02:48:08 GMT\r\netag: \"19758c6da516f95d9fad2a210c525ee7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DFYA3dyYowE3V7QZyNQq.2yD..TzK7c_\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 5084\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Hepgfu5TS5c4YARw8I4Tzn2nALh76k8WGbWocC%2Bs3IIO3LlJ4DDq08x3wEgjD3sN4%2FXmmHrwwpPCNUZZ%2FirqhhliG7w60u2XnrD%2BNNx76Vm6MaRBtUd\"}]}\r\ncf-ray: 9994bb0ffffc569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"19758c6da516f95d9fad2a210c525ee7","sha1":"85a15edb10e5a58b2355faa8d54224e400faf5ec","sha256":"b1e625a6fa52c6d465bbcd0b311a4c7d54efc8c1c66da2d8f9d34a3cfb5d417b","sha512":"6074df196b5f6683e23183b4048815ec25b220f19ffeb11c4bd599ea1fe149508b220a5acd72c7717ca6f44247b4a4d1126d6499604a18cc8e412b4ca3a6bfc9","ssdeep":"","tlshash":"f4411b8dc4536b99cc2f1b751c3478bb95f8570518dd3e64da80da18c40fccb6214445","first_seen":"2024-09-11T20:05:16Z","last_seen":"2026-07-11T19:12:32.22499Z","times_seen":490,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":82,"dns":4,"connect":11,"send":0,"wait":21,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/21629/small/solana.jpg?1696520989","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/21629/small/solana.jpg?1696520989 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1524\r\nx-amz-id-2: qBwxDJc5rBeqpthU2u40F1poxgR4BuNgfRKbDzFXoMaUauFn1V4vZB1zO2YSnp+DTL2oVz9jGhc=\r\nx-amz-request-id: 5G9KCHT0KDZ4PPBN\r\nlast-modified: Wed, 29 May 2024 02:41:46 GMT\r\netag: \"17346937de2ab4541a3b75960b3e3047\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: O.0VWfg9l5NFS6vBDi7bK9oDAl6c0TH_\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1333\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1buHKt69tV9hdMG5poruEZfelnHInIdJ6yk32qaskLWk%2B0nD4EeffIVhXjHzfVJ0nF4OOTUtKdAgYoy7nUHHwzZFVf7eEAQcnsi%2FPMOgsnFCavHCfwe8\"}]}\r\ncf-ray: 9994bb100804569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"17346937de2ab4541a3b75960b3e3047","sha1":"52c32a9d6fcc11522e50f2fdd0b6ebc2717e9f9a","sha256":"0a81b65012e2c36dd8878a263ed8ff36da3026076d35bf27436848a49407c101","sha512":"328f8b10df7d265a220b38c5bb136b6d59327c0d46d3cccbcbdfecc4087f82d111f712879db783ce446a1c281e265c2b67a5688de7fa449f0707908716143a8a","ssdeep":"","tlshash":"9f31a5e653daa314dc9d0b74618087b0fba27f1286d783ae8180448d3b781c0db244af","first_seen":"2025-11-02T11:08:41.233896Z","last_seen":"2026-01-30T01:00:30.819149Z","times_seen":19,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":68,"dns":8,"connect":4,"send":0,"wait":18,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/50882/small/hyperliquid.jpg?1729431300","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/50882/small/hyperliquid.jpg?1729431300 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2005\r\nx-amz-id-2: 6uOBttw0Jc1K1KnU0yE9MAV0FFYD6EMm3n0sRtZ5dIcX8ghN5tQyd232h+dbqsYvLJU5khkwEWo=\r\nx-amz-request-id: 0YAQ6WPNBVVE0BP8\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Sun, 20 Oct 2024 13:35:02 GMT\r\netag: \"c1b5445390b7149b49495211bd7c3969\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 788ZQS1gAq3yfP3WiyNSH74tyXjWXrYZ\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8KNsWRDD1fg0SrpcKKjvQft1dRQoplQmnAPfJE3mNscJirBIhGueeD2p191wMUb0CJ%2BmBECaZc81yA4%2F3CcxE%2FXp70I5aiFAhRxW96y1GR%2BwijsLL%2B7\"}]}\r\ncf-ray: 9994bb0fcfd0569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2005,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"c1b5445390b7149b49495211bd7c3969","sha1":"419f4718f5cd8e155e894e6b4886b4f9d9b3a772","sha256":"0451149a917679ad315c3db479cc1d187558799698c2340903b58958a02c92f1","sha512":"71e8692b7765e824e9e5bf863ca768e4734dbbb3506a8da4c7f8c8763c675c81a8547173eed29e5b51603ae513b9978345765e2d87bd739094e7cdb48f9d8645","ssdeep":"","tlshash":"4941093d333a2618dc61073509f35740fb3cbe1e66de9304428122eaa5650cbd574669","first_seen":"2024-12-22T02:31:25.204723Z","last_seen":"2026-07-11T19:12:32.203891Z","times_seen":257,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/100/small/fmpFRHHQ_400x400.jpg?1735231350","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/100/small/fmpFRHHQ_400x400.jpg?1735231350 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1770\r\nx-amz-id-2: wUZtuf6hAD51L7pT0irbSar2MMzyNkZgdXsZ1Xy8zL2UZus3n9zvWeUpOTYOOvCAKB17+muudT0=\r\nx-amz-request-id: CS2JF0DVPCWABVWE\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Thu, 26 Dec 2024 16:42:33 GMT\r\netag: \"a5298852872129489c639c3242a50291\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Bn1cPHXEu3cEJWlOwv0FlUiyChPUnHoW\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2630\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wuAjxpC55%2BJS4rGpBUl8yNr6eeJPlEIKSL%2B88s8zG0RP07VT%2FtKB2YVqJO%2FTMqRz0xXgelhit7VxoFhv2UT0THPQpRYxnZXTPQ0qS7sbympGnp%2Fkm9kx\"}]}\r\ncf-ray: 9994bb0feff5569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"a5298852872129489c639c3242a50291","sha1":"3741174eb2d60180696e3cd7d13f82cae9f23308","sha256":"099e0c36b351c16628c272ecc1ea46d945827d85011c6b8faf7f6a5ed83e33c4","sha512":"ea83312b84e09cd13eaa7c9b86d7bcf8e4ddfdb90e0153346ff420a82ecd3bd98f4792e69bd912a3fd443c9e2bc06b674dd5cb5060cc6248a8678e844bc3aca4","ssdeep":"","tlshash":"2931b769236cdb09d51f1934b1d0cfd4c36bbe25add7d34ec18015297b3a5c14918d49","first_seen":"2025-01-21T17:43:41.326736Z","last_seen":"2026-07-27T09:54:10.89669Z","times_seen":282,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//notification-sound.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4//notification-sound.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 28255\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:04 GMT\r\netag: \"6909eb3c-6e5f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7790\r\ncontent-range: bytes 0-28254/28255\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lldOs8xzG3R8Vxc4Lu8i5T%2Fhdo%2F5vx3DU0BrXA5V3gnB5rEsmvCqrcQH%2Fyf4XjxaRybDSTvjJCxjshFqxuUmhyEug2y2YF7lnwM%3D\"}]}\r\ncf-ray: 9994bb0ec87d0b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28255,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"ed632238ac260d2ff13a5b319163ea80","sha1":"ec3d658a6b985654354abd43c1688d9d020f9eee","sha256":"b43cdddf1836f84ff2873a9716fc541205e42ab4ee6163495fc5d9fa11a475ea","sha512":"951d0ec7b29dad74312dd617d2b715863f417e64e29702535ba6e9fcf231a8dcc2f3de89d5abee1b51fe03f7d3209eae13c17ca04878d7634e3841714e2059d1","ssdeep":"768:N4mLXoawnNyci56NczRzQJhvEgmTKBm9zt1J85voWDmrpNxe:SooaE8B6CzRAhsBmBm9zt1JVlrpNxe","tlshash":"d4c2d0c724248328f92a0db47cb70aabc250bf6804b14be6e34e93015eeffc50f4955a","first_seen":"2025-04-16T11:16:17.238101Z","last_seen":"2026-07-27T09:48:29.863072Z","times_seen":7011,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//notification-sound.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:44.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4//notification-sound.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 04 Nov 2025 14:16:44 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 28255\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:04 GMT\r\netag: \"6909eb3c-6e5f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7792\r\ncontent-range: bytes 0-28254/28255\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66iJDdQV%2FX5lZhXkjvgsIRp8s3KM3AFUNMp6SqLz7fjfcYZm%2FUkMnrnoy4PY1Ra9Yc2ImRiCESrmkqr0Hmv3ioP2cDat6y7eRlE%3D\"}]}\r\ncf-ray: 9994bb1d0f870b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28255,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"ed632238ac260d2ff13a5b319163ea80","sha1":"ec3d658a6b985654354abd43c1688d9d020f9eee","sha256":"b43cdddf1836f84ff2873a9716fc541205e42ab4ee6163495fc5d9fa11a475ea","sha512":"951d0ec7b29dad74312dd617d2b715863f417e64e29702535ba6e9fcf231a8dcc2f3de89d5abee1b51fe03f7d3209eae13c17ca04878d7634e3841714e2059d1","ssdeep":"768:N4mLXoawnNyci56NczRzQJhvEgmTKBm9zt1J85voWDmrpNxe:SooaE8B6CzRAhsBmBm9zt1JVlrpNxe","tlshash":"d4c2d0c724248328f92a0db47cb70aabc250bf6804b14be6e34e93015eeffc50f4955a","first_seen":"2025-04-16T11:16:17.238101Z","last_seen":"2026-07-27T09:48:29.863072Z","times_seen":7011,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/service/5.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/service/5.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1195\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 44, 8-bit/color RGBA, non-interlaced","md5":"5118ddf09911fb7aae75d78725221c3c","sha1":"cbe51c456e7d0e024ac76079ca4a85bedf606324","sha256":"210dfb468602516000b577508bd0317a74add53a844aeeaad9e25aa210d0f20e","sha512":"5076ebfbde2e6732e8522ba0e6fe7d2bb1499483f1443ee1c98e006ba6480dc3177a7d4a029d08f095b2c79982536cfe7ce06eab4283c033d224b8c7e34f55fb","ssdeep":"","tlshash":"7421daf70df9f7fe0f48b9496f8b05e0949ed998d81a4310bd54755f092388d4974714","first_seen":"2025-02-26T15:15:16.41312Z","last_seen":"2026-07-27T09:30:13.159006Z","times_seen":342,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/css/aos.css","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/css/aos.css HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-07-27T09:44:49.765864Z","times_seen":42181,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/logo/preloader.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/logo/preloader.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2557\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 139 x 139, 8-bit/color RGBA, non-interlaced","md5":"4bfd3d50decf39e0065693dd846a4fb7","sha1":"fce13fa2c76a0aebe2df89506f0d87084e34f389","sha256":"a8fa1848f74c325face88305529ca95771a55090bb8ef1d21d80bffd9801ef2d","sha512":"c2423876aaf9092ab3a2ba85a94980d1b77c81057f240f21656ea4419ad6006b99263eca92a5d2a6840975473f058cd316a6bcc39fa942018cc7f05c52d43cf6","ssdeep":"","tlshash":"8b51094232328a6953d78e2d4b8e54268c9224eb748291b41b7e5715bcedadf1f42e88","first_seen":"2025-08-08T12:21:10.255856Z","last_seen":"2026-07-27T09:30:13.168268Z","times_seen":56,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/banner/home1/4.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/banner/home1/4.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1594\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 30, 8-bit/color RGBA, non-interlaced","md5":"a9985c55d9f4ce1b2201df62e3a882b1","sha1":"0b3cd40b1ad0797c67b27b5f256970c23910ef5a","sha256":"f2975e37b06e4b00120ac8248ed63919dd39dda368646585ce12609b21687f87","sha512":"25ec2946af83840094dd1436c3a91292f969e16c992b3e9631486d606fcc5e444252961f6fe23b861c428c8f315b79ed7d03b131095a738176857b1b893ce9e8","ssdeep":"","tlshash":"fa31087d4b0e0999c82cc4d06c590444ea7b3ac25388ecc87e352ad537a5be0ce9e823","first_seen":"2024-06-17T17:48:48Z","last_seen":"2026-07-27T09:30:13.18912Z","times_seen":369,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/feature/home3/4.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/feature/home3/4.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3052\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"85405a421f87dd9f981313667ce212e7","sha1":"38c009f917f46281ca7c21cadf4d8d28eaa5f51a","sha256":"db6f1c435c32df8a106ac1ef7ec630d3afced5ee04fb713a20f501903db7e3e3","sha512":"158534c7d5f539a31d4ef51c47d18595cd99ee801ea4dbdc19cf9bde71218b91a9667ed25a47dd1e1060350679521e4a1573c04c5bc6912a669ac99384f17239","ssdeep":"","tlshash":"98515dc9ef3adc3a020d514bd39dd570ed3a0e8f9d48f26972f410105c46e08e52d269","first_seen":"2025-02-26T15:15:16.421849Z","last_seen":"2026-07-27T09:30:13.215822Z","times_seen":294,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/jquery-3.4.1.min.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30045\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88144,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"f832e36068ab203a3f89b1795480d0d7","sha1":"2115753ca5fb7032aec498db7bb5dca624dbe6be","sha256":"4c24dfd28784ad2befb3dafaac6bf1ed4e7cd58cce713d9a0b228d426e812baf","sha512":"b9dbc08c984ae3c7fd44822ec2e9a22cb8cf7da55fa3975dbbdc3f18fd7e7a7793e8d93604826574e3dd6a4f982d7af4f96c1af5e10d847b8394a34a82c398ba","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:ygZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"b28319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:24:01Z","last_seen":"2026-07-27T09:30:13.122724Z","times_seen":12902,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/aos.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/aos.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4194\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-07-27T09:44:49.741826Z","times_seen":21890,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/logo/logo-dark.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/logo/logo-dark.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Apr 2025 13:11:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6229\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6229,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 265 x 71, 8-bit/color RGBA, non-interlaced","md5":"45387b13d650f0722ad1612d4c1ec6e1","sha1":"ce4966de74705b42119dbd3d80cd4b610526bbe2","sha256":"67044e47f1294e943ff8d7118b177ccbb15710e15d146836be4d9cdeab011f1a","sha512":"07181e32500ec8ba4fb1a755bc07abe3248f13715aae36ca034952391655cd630e03b2f51688cda5720e9264937a5ffa56f521687f51247bd10e05be55ae542a","ssdeep":"192:jknUVPgRVi86IZE/PJhvwdnogvdEZul5Gls:InUVoRcNI6/Pionuves","tlshash":"6bd16c10ed11dd119a4a1f507cf5c1230a338fa0c716e094acc9ee9f7db117acd9e68a","first_seen":"2025-11-04T14:17:18.368351Z","last_seen":"2025-11-04T14:17:18.368351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/fslightbox.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/fslightbox.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9120\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30524,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (30524), with no line terminators","md5":"5bcb8b6014f33fc9b76d313137f93c8c","sha1":"167b1e36379227a2fa7c635269bdcb0ed8dec4c0","sha256":"77ba0f0971a262f3fe1999d37208a8a7ffa1f2e563d4437bd03b1866a2219749","sha512":"8eb611d5c1bbc30ab697eb8d1fe5d7175f218cdfa3f0c0633363cadbe7d5fe70081cac6aa60e3bf6b39614ec53a429f23cc65e1808be7830311f2af34f393246","ssdeep":"768:x1g+tzeuLaIUfh7VOXqqI09lgHZQLaTVzrpGrav4diKk1CAw5S+EXMm6u:x11tzeuLaIUfh7VOXqqI0XgHZUaTVnpp","tlshash":"50d2f76a7724353881cf119fa06fdb0f237650a2ec0f6445d51ed8e5acb6c6a02a7f8d","first_seen":"2023-08-06T16:50:10Z","last_seen":"2026-07-27T09:07:40.793075Z","times_seen":1320,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/bg/wave-platformbg.jpg","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/bg/wave-platformbg.jpg HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11716\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 950x385, components 3","md5":"b2b301f951d05fb0d88f249e4961ff72","sha1":"220892bf221ea82a4bbadd7ea5482cc0667943c7","sha256":"3a4f150f51173e13ac47524809c00f7a1c5af1da67359f9ebd5b982fe6cbcfdb","sha512":"4e0b8d5604b03308fc1c703d1571b5e678e29f95ad76c164ef4a4cacd85b9bc9853f48b0e822b02e0f34bc76d319ceb2225b91a999a42dbce21b24c2d23a18de","ssdeep":"192:/8fmBkmX6ekeakdxaQPh4FMUefED/o9gJo4fmw+i4aPy6qa7PCXmU/MNo1VXeGW:/8uPkeaSYUfEDgMo4fmwhPy6N7PXUkNf","tlshash":"bb32b016f10688e8e8c50132e9622d54e602ff1d7ddcdbf7b125ac3a53372de8d90168","first_seen":"2023-05-18T16:17:48Z","last_seen":"2026-07-27T09:53:32.773549Z","times_seen":339,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/39926/small/usds.webp?1726666683","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/39926/small/usds.webp?1726666683 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2734\r\nx-amz-id-2: 9Fd/m9XJaq4pOieHL6l0LzXgauv3ZBrkJDQ2LjTyDstotdcYicQ+5rDsj4/7jRekHFeoMzL3Fg4=\r\nx-amz-request-id: DF2TR7F9VT1DTNCG\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Wed, 18 Sep 2024 13:38:06 GMT\r\netag: \"64c7871a57e51628d41cc802fd098cfc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HqD5pBxBstUJ_qNLlBy3VtdPef7KZKUW\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2630\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWndRKeePAxXHr1%2B6UaO4B%2BVsLJpi2raNfr3Pg3I4k9PQ1ZWKbDiv31LwMcfPeuWLMlQm5C8TB7cLb85wBUtF2zd%2Fmjkx7GcAJ64Ql3KORyWbBHoDr5e\"}]}\r\ncf-ray: 9994bb0fdfda569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64c7871a57e51628d41cc802fd098cfc","sha1":"338d5ee95934b582677defe6da62ba91ed37a83c","sha256":"8d76bbdb9e9dcf65f5d755d0ef3c8f78c35ded636342d2fed0e2b70b36caf500","sha512":"ba34402558063304d03de68cf1f934ba1faf472752af4060eaa3455a721a24602b5594db3527b8ba676d4cca95d63eef74e02e848b98feae638f3ade789eef17","ssdeep":"","tlshash":"ba518e17f179a400f0dd425f160ba58748c29e5700e1f419fbe08da0026838f82b9d7a","first_seen":"2025-03-04T10:27:02.929813Z","last_seen":"2026-07-27T09:54:10.829453Z","times_seen":198,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/partner/light/4.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/partner/light/4.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2061\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 48, 8-bit/color RGBA, non-interlaced","md5":"5ed67283685a647d44ba73b0291d06fb","sha1":"26a4f4c29ced0c602f0ad35d87ca3356ea1b8034","sha256":"55b9c44a1bacdff707d6c1a2dc4ab8fa8c15f4136bf39c556b75e30d94ed70af","sha512":"ce9093e577e6b4c1661e2958dc6ac8bd947c19b374b673795bd2ef417226d433db961e708d42ad5a06dd892f33d8bc4b2f469b42b68b848fdffc7d1d9aec9354","ssdeep":"","tlshash":"95412a8bc89a2658bde5645c0bba2f349d33090dd2533939bab68d2c705b4d4a361b1b","first_seen":"2025-02-26T15:15:16.401664Z","last_seen":"2026-07-27T09:07:40.75082Z","times_seen":267,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/icon/1.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/icon/1.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8116\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 106 x 106, 8-bit/color RGBA, non-interlaced","md5":"875a46e4f2d69d1296cf5719f0f64e92","sha1":"635b930ce8720be83fc58f0e085b7411dbf8bacb","sha256":"c46b0e8e724314a80586cc67b0d5847106eb36d9b47f36e5bc06ceffc2046dda","sha512":"418e489fd9b644ab07b08dcbd9db81b744d360a27985de80fb8e6fb74304f54955f3881a989a057f55cd8c34e71d746f025f48b9f26a1bc2a9a95268f446a352","ssdeep":"192:rS7PD57QCblNMLorw2m702humQSMLHKsXEy/p8F5jDJ:e7PD5cCbXJzm7TuASHBXEy/w","tlshash":"2af1af83f228e5b25472c166315de95c383d22ba060de79bbceea4b4c51c5da0615b60","first_seen":"2024-06-17T17:48:48Z","last_seen":"2026-07-27T09:30:13.156846Z","times_seen":368,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/about/home3/5.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/about/home3/5.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7176\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"071203668cb6e9a327d649b67df547ab","sha1":"4ad1678268acce71e657f3b5e6a6b63fee9184cd","sha256":"5469e3f32a7eb6ad01bc124fcf4bc486ae0e8ba324869f2e9c0d2a3fe83df5b4","sha512":"230abd8f81cbdc86c82975073a9444a7c9ef2f80c5aab49743364b1b5c114582751ea2a3b39f398f47dffacd4aeb798455bc90311b6a5b9d4ebd213c6248fb57","ssdeep":"192:iSz5Lm45mamRTmxaNcfIShd9E0fXmBRS1w65/E:9z5dSKIShddYS0","tlshash":"80e19d0448cc3f5eabce982b9a8e5631e0d7f58f4d213e369785242a703e46df81638d","first_seen":"2025-02-26T15:15:16.416217Z","last_seen":"2026-07-27T09:30:13.227221Z","times_seen":252,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/css/style.css","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 13:38:31 GMT","end":"Sat, 03 Jan 2026 14:38:21 GMT"},"fingerprint":{"sha1":"6B:56:35:9A:D8:BD:79:A5:E1:1B:CC:E1:5B:91:B3:FE:CD:44:0C:78","sha256":"DE:78:B0:AA:92:CF:50:13:B5:80:B5:42:17:8D:8B:D3:6B:57:6A:83:56:E3:77:6E:41:19:A1:01:AC:A4:14:20"}}},"request":{"raw":"GET /widgets/assets/public/css/style.css HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nlast-modified: Thu, 13 Aug 2020 09:10:47 GMT\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\netag: W/\"c2be2f2d17f1ad2e99e26d7d1f03710e\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0f31cf94bd251bd501ac532dacb719fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: I-34x0WJdiCwS8j7P0Clnt3fMYufkwLCs7-yARnNlFlaNnEr2wu6Xg==\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\nage: 6719\r\ncache-control: max-age=14400\r\ncf-ray: 9994bb0b4958b51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50710,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50709)","md5":"c2be2f2d17f1ad2e99e26d7d1f03710e","sha1":"ebc05b4d01edec633c9df96b4b0d41b15cfc612d","sha256":"06a92e9862a29259429538cdf7a2cb5675e8675d0edb9cfb26eba6e58e826245","sha512":"93e9541ba0917deb25e1e7d3cd61358670318cae49c82e6af2471e507f2214c25b855d2a6adbe024f031d09f0788f2356f4b826da5269bcfcd525d1ec8eee9ff","ssdeep":"384:El8298DchESZnQshDcIqPKUyZAjq+AjqaAjqCh2WVlhLN8Lt8/ty7UBj40ZkS5tT:YWDtYQODzxUy6h2WVl6Gj40AgR3eBx2","tlshash":"6d337621fa427219277ef4116df0f39a627c513191314b7afa9793128fcac9ec352b1a","first_seen":"2024-10-27T18:02:30.419505Z","last_seen":"2026-07-27T10:01:48.140431Z","times_seen":603,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/css/swiper-bundle.min.css","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/css/swiper-bundle.min.css HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4257\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16493,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16237)","md5":"04720c60bc020cbba92785dd4029f7d2","sha1":"af008e8793ba75c346360e94e96e3cda314ce27f","sha256":"322d15d99efb792c941a5202fa8fc7ee9e932847227383ff9605163338a08eac","sha512":"37622c5ae2ac0586221cd61d684b8ae1e691274a277d41be71d66296775868c12150642afcc72c154ef9ab737e8db2543579ba3be2b9d8346b2be6d2a411a3d3","ssdeep":"192:i2mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"f57223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T08:09:54Z","last_seen":"2026-07-27T09:40:14.344441Z","times_seen":12467,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Faker/3.1.0/faker.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/Faker/3.1.0/faker.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 166218\r\ncf-ray: 9994bb067d9e2efa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cee-bfde9\"\r\nlast-modified: Mon, 04 May 2020 16:03:58 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 447841\r\nexpires: Sun, 25 Oct 2026 14:16:40 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=31hLM1ytSeHxiYz4otpirPk%2BXzZBkFR8SOq8%2FQsxpf79Jz2%2FHCLxCAX3PEI1%2Bvfg%2BitTTSrp04XfpDe2EEQvVj%2BffZGcovUjiWz7gcc1zk1%2BGpP6DdZVMg5guBxGrzRJbX5VGSH5\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":785897,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45205)","md5":"3d17e2ab0b2e2024727069a32d78ab45","sha1":"4bda7ecf405501bf4379f7c6d6e2d0b24cf5079a","sha256":"40774939b8433bef952133fa4b8b4c9431d158c6943a4facff158846017f618d","sha512":"fec7831f155f87536f154b1c023f06b07415649bebda38c0a18b0d2fb02cd8509a1475076086ab977b110af565160ca8b953624601c879bc8b2a3a6077548b0f","ssdeep":"6144:7/GA5hMMq6jo2aXZsydaiIXsVd0sQwGF1F3PKJvDQ+mzIv5UB:L5v72ZdaiMKesatAvue5UB","tlshash":"c7f4fbd35c1327364fbd13c895b7f488a179812bb4c6bd46eae1c84a321592a30e7edd","first_seen":"2023-03-07T23:53:40Z","last_seen":"2026-07-27T09:37:47.091029Z","times_seen":455,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":14,"receive":8,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/18834/small/wstETH.png?1696518295","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/18834/small/wstETH.png?1696518295 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 1628\r\nx-amz-id-2: H+v+0A6V9QNQRq73N9H7f+zCYj9gghwidq/LrfAhW8grFTXD7qc0hbzzjI20Jbjc4PVXcmoKJrM=\r\nx-amz-request-id: 0YAKD477XCTRJV0B\r\nlast-modified: Wed, 29 May 2024 02:38:42 GMT\r\netag: \"0aec842a4de31085e66e787401108d3a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9HcD49WNR0kd9Uwe8hhIiAw11.FuyV_\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2632\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IREmpbA6bgliI2n5WYxXWx1NbDknQ%2FS%2FQaDLf43fDSH5t%2BjRwB71ZydkqqiW0z0hOH6HhdoL4evPNoZ6kPXanfBr9jbE7Q2l1URDK%2FwcZRImkC5fJdWj\"}]}\r\ncf-ray: 9994bb0fbfca569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"0aec842a4de31085e66e787401108d3a","sha1":"c0c9a0e98186b648e6626c2357c7160c42f1456c","sha256":"058fa745e2245d1a728ded6f9aff4aca38837bcd07685436a03a3e9d7fc0e8e5","sha512":"99d38b889941f8f204956d65102fc3ba188446eaaa1cfafca34c9758eda9e853a4e870af5347d0b2f83f06c8a9d0509b4b08d37de9372ffbe09e0703b180e76d","ssdeep":"","tlshash":"d031c6c5d0524a3a83a08158334f597eefb223cd41266b1e21d9f96a1d83a941599ab8","first_seen":"2024-12-22T02:31:25.196617Z","last_seen":"2026-07-27T09:54:10.88105Z","times_seen":347,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/7598/small/wrapped_bitcoin_wbtc.png?1696507857","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/7598/small/wrapped_bitcoin_wbtc.png?1696507857 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 5821\r\nx-amz-id-2: OLQnpljgnCy3ayc+flKIejDF7QhhMjQuErkzYZDeIxkwYwNp5Sc1dCPynRcDUZR9Sxs46RAh9rc=\r\nx-amz-request-id: 851CHCD3N4HJEBW3\r\nlast-modified: Wed, 29 May 2024 03:02:14 GMT\r\netag: \"0e9786e8a24232dec93507751246f5be\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: didZXCGGZrx0nhh1lVAr7_SmywOtFEvO\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2631\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=db%2FrDNH57J7IqjmgWP9JAru9sFZ5Cx8Ots%2BUSc6cE2hx1PaOG6xvpZsEqOLcU54oR7n%2F7cTYSXYISfxHrTQ6XPCmDLA2TO0sajrpKk%2B1TD1dnmMa3rsX\"}]}\r\ncf-ray: 9994bb0fcfcc569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"0e9786e8a24232dec93507751246f5be","sha1":"369ec6aff063bb888ebaff536b07251e492a6705","sha256":"12ec7c63b824134fd8b6ff7a12794be66a574b86dec95fecc0ba51447dc497ca","sha512":"581257e95cb9da8bfe89092fca71e43b03dfcb74455e12adbc11a1109f32b6a4280933072831440c8f4a048e9c8c780be4f0b2b198902ad0911c21d7f7238f76","ssdeep":"96:shh3CrP4abl5cpXy1+8NNw6giupahjqAEcpm6Am68lr+WQ1qJyqNzs7BQDj9:shh3uDxiQ+8NNqahj/9m6Amdlrrj67Bo","tlshash":"9cc18ecca27a99718d61437f8b749009582f3add185e0f0bf501c885f656abcf272978","first_seen":"2024-12-22T02:31:25.200444Z","last_seen":"2025-11-30T03:28:04.895383Z","times_seen":183,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/favicon.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/favicon.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2557\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 139 x 139, 8-bit/color RGBA, non-interlaced","md5":"4bfd3d50decf39e0065693dd846a4fb7","sha1":"fce13fa2c76a0aebe2df89506f0d87084e34f389","sha256":"a8fa1848f74c325face88305529ca95771a55090bb8ef1d21d80bffd9801ef2d","sha512":"c2423876aaf9092ab3a2ba85a94980d1b77c81057f240f21656ea4419ad6006b99263eca92a5d2a6840975473f058cd316a6bcc39fa942018cc7f05c52d43cf6","ssdeep":"","tlshash":"8b51094232328a6953d78e2d4b8e54268c9224eb748291b41b7e5715bcedadf1f42e88","first_seen":"2025-08-08T12:21:10.255856Z","last_seen":"2026-07-27T09:30:13.168268Z","times_seen":56,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/44/small/xrp-symbol-white-128.png?1696501442","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/44/small/xrp-symbol-white-128.png?1696501442 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 1492\r\nx-amz-id-2: GOs6ks7fnCmZcgHQx1NTzW5CKAiImwwgObhvZVVvd7YQ5cxEAjBFOCBjcXfgnWs+KgHcKOcSAbvz/G8IPl3L/A==\r\nx-amz-request-id: 477BGVJYN76GNWE8\r\nlast-modified: Wed, 29 May 2024 02:58:49 GMT\r\netag: \"1ed36d280916ecfaa451eafeb7dc83e0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8UgagQYkV2t3o2PUNNubby2kMqMsKaaX\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 5084\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbjymQgTKIAvLmUMfjrh0SveAqLY9eSO1l41iJ4zT%2F1idNNwtDN%2Bsaz38mqMiXmx18k6TafUNeJ3wP3LgscfPIFl%2FlXUTRON%2Bufr4%2B0W1pIJgzraFzEP\"}]}\r\ncf-ray: 9994bb0ffff9569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1ed36d280916ecfaa451eafeb7dc83e0","sha1":"53e2ce224225fa28cecddea0f93a3fa1ce7779d0","sha256":"61a24e4420a9f37d5a0cba8d992198c555986ea046dd81f34d237d37c9353e08","sha512":"29596c765e3f5f5341caad39059df3b7df1d6e2eee73da2a5252505ceeb9673bc89e37079faa3ea895c1e8a8a8764ecaa5ddd46f8832a157c4723c099bd149de","ssdeep":"","tlshash":"2131c7fea3510691d7273a8c023b8511ee372ea341127c49f61bc42a306ffcc3a63545","first_seen":"2024-09-19T19:38:42.339425Z","last_seen":"2026-07-27T09:54:10.826702Z","times_seen":400,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":71,"dns":3,"connect":4,"send":0,"wait":24,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/877/small/Chainlink_Logo_500.png?1760023405","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/877/small/Chainlink_Logo_500.png?1760023405 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 684\r\nx-amz-id-2: YT+0yp6glbfq3LM86vDrkqI5oHGTFEl0kRKIpfU1+mZJfLXL3kVvObYEFnEUDGKfO/gHmJ1Wais=\r\nx-amz-request-id: 56KNTVWM2TC30103\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Thu, 09 Oct 2025 15:23:28 GMT\r\netag: \"7cb6ca8f7f2782723a29ced451b82b55\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VgbRETDpLbE8o44LGRHDFgHdz9wp7Ktb\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2631\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFdbzY7U%2B9TFa75DhD6BHyGQkOjfOiBcJsI%2B6%2FnwgnhG3TXZzgSi1c1b%2BVnCGNOFzJdhY02JZw14i5%2B4qd4SjvrFYwEQkzIwDPyeGARfzA3%2FWa9V26wY\"}]}\r\ncf-ray: 9994bb0fcfcf569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"7cb6ca8f7f2782723a29ced451b82b55","sha1":"f1d818b6099d19beb3655066597fe131fa4fd038","sha256":"ea90e1355c60f66039bce440e66a8142667780707ec70c098427a3066a5c939b","sha512":"30a77ed6e6b2b9bfb0e561c24056a8e5dd4f07209567f5de161641b0987857252bba1cbb9b998b8bcdf7b3d0d4d8b4673de2481406d2579ba7b8fab30f6f16f2","ssdeep":"","tlshash":"5601839f2764c9b8cc418f4480e11ac4af60efc30fb97d0211294ae14c0b35af4c24d1","first_seen":"2025-10-09T18:17:46.96339Z","last_seen":"2026-07-11T19:12:32.229156Z","times_seen":136,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/banner/home1/3.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/banner/home1/3.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5274\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 102, 8-bit/color RGBA, non-interlaced","md5":"dcea831908fdf647910f17bc15f302c0","sha1":"a9c6edf53c2e9eb2948646898eae47f6c6e4e5d9","sha256":"b1617bcf850fb6d09b7b4aed06a8f418b8dbc40dfa696b513a90c0e5804f2482","sha512":"92fec1ea9e53c59bc55789eb4a4c9857cb4c777040fca41696b95f4079d9e2398b6886fbbd1732193285f955a7062556a3dda6b8f386e339be42abd2d6d556b0","ssdeep":"96:hSu7+ja6XOu3aGeaJEMECAVqIDnwa4SRhhcWJaw8w1uwyicE:hSrjF9tLJEMECAVqI1d8KuxicE","tlshash":"51b19da2d75207884e08fd1a05415a93e10fefe6600e680d6477e13bba7783603d9ebb","first_seen":"2024-06-17T17:48:48Z","last_seen":"2026-07-27T09:30:13.178276Z","times_seen":353,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_389_0/static/js/render.fbd1d6b87612fc45ab27.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4/1_389_0/static/js/render.fbd1d6b87612fc45ab27.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apexexchangesecurity.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909eb3f-1883\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 7789\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FwIysJMu5Za4zPFfBG4j64RIGYQ4yuGoQee4d6BPqSvnjXIsA9FeKnmclBtNc3DQIwc3Cn8mrolWQdeCTWtFnBt4o2fg%2FY5PYM%3D\"}]}\r\ncf-ray: 9994bb07d9760b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6275,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6275), with no line terminators","md5":"bae680b2ca6c32108dd7686fd069ca74","sha1":"cd8c2e222124bb8b495ff0232c8acb30623eea20","sha256":"e860816c8fb7f70f7d368977544453a488270292b635345fbca614d5b3984311","sha512":"c2e5b5c3d1c68c54bb08ed062cd30c4b91378b372187d2ecda9f7ba23050bae07f45552f3481158f65c92e0f5b47c7ff2cad458bc019ce9ce885528350a4bbe5","ssdeep":"96:oZemLCc54GBALTa4qc8uLetLuy/IflRN+XMydT9pKFBq4wxBG/RvPr:+Lx5P41LeEygTuMytlxApvPr","tlshash":"75d1b891319825991226c66d70bfb30632a9712d240e9194736cdcdebe38ec7814beeb","first_seen":"2025-11-04T14:17:18.37897Z","last_seen":"2025-11-05T12:14:35.119415Z","times_seen":17,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_389_0/static/js/chunk-WidgetIframe-fbd1d6b87612fc45ab27.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4/1_389_0/static/js/chunk-WidgetIframe-fbd1d6b87612fc45ab27.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909eb3f-71e4e\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 7789\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2B%2FzAXw4zbcQ3ZYPN6sT5OmW9Ah0exCC0ImFcLhFNFK6sGUH1VEJNQPxcNBynhLcJVSr5fuz5t4eGy8qmjV1X4%2Bwo%2F0XU44k2PU%3D\"}]}\r\ncf-ray: 9994bb0e88260b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466510,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5627a5694eb4c794f594eb2e0bee3931","sha1":"cb7c700b9fa88f4cc9af13cb6e85bd8f5954c5db","sha256":"4668dfc7122849bea613e423a71738d96a3e757952c5387d3e6aece3328dcefa","sha512":"554a9725485538e7a4e41611974baa9ce0b1fe1897426766b3bd0bd7f558ab034d2dde0567f105b4f6e871ce1cd6418cf5ace849a24ccfbc8032bf8d342b25ee","ssdeep":"12288:T1UffmSSqZhMfLB9s7sI9IF2mHKP08zRz:T1UfJMd9s7sI9IF2mHKP08Fz","tlshash":"f3a46dc372c3746cbba752aad4bb540d753e345d794880a8f6bca868188a5d46333fdc","first_seen":"2025-11-04T14:17:18.384683Z","last_seen":"2025-11-05T12:14:35.066701Z","times_seen":17,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/6319/small/usdc.png?1696506694","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/6319/small/usdc.png?1696506694 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 3966\r\nx-amz-id-2: 2GDssUIGp+1szfaWGZKcDyONS5KPvjvmZdyq6YIztJ6E757kqPO+HMyw9+cMXutbkcJcGGMTDyE=\r\nx-amz-request-id: 58QEYKFSHYAVP9MB\r\nlast-modified: Wed, 29 May 2024 03:00:48 GMT\r\netag: \"2129c1382a6617f0083ce8d5936b738f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .5ksyZKuLnhEzFkmjGzccqmJJLAvd9gK\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpNBY6BLjjGHVpk1hT0LUhSUlJwfzkYWu25sHlf7PRyILkf7kex%2F2W2Rzj1E3yFxt7uSOxLI5Tu3q%2FUiUcn%2F%2BnZ%2BTV7u3ohJHvBkNf%2FQu%2BpD6S0%2B%2BATf\"}]}\r\ncf-ray: 9994bb0fbfc1569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"2129c1382a6617f0083ce8d5936b738f","sha1":"2c289471feb06b12228449841f52cd6fe23e9b3c","sha256":"1bda72a7f4a2f1931510e992c1ff38ca0f1b7a497be6636ab6457d08ca003c52","sha512":"ccf8f0ef3ca41456e797fde3e4dbcffefe37879d98097fb5c4745bd9f216c38be841b1356990e16f04271e2d9e1eef496370187530819ebee4151d1591097f68","ssdeep":"","tlshash":"65818eadb3502311edfe132adf49afc9d9e2cf44a00bd13425140a098c2741d87d7d0d","first_seen":"2024-09-19T19:38:42.360764Z","last_seen":"2026-07-27T07:44:27.066901Z","times_seen":247,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/68480/small/figure.png?1755863954","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/68480/small/figure.png?1755863954 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 667\r\nx-amz-id-2: bf2Re8BrZ6McQiKLOs/CXK1NKAm40iDCa7MxQatfVTU9Vko5uL15qfQ5Uoe49A+XdqcBSYGqh9zFTXWZiOOzx5X1DixAkaPK\r\nx-amz-request-id: 6DEFW9SW5V6F7MES\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 22 Aug 2025 11:59:17 GMT\r\netag: \"fdbde50da0728ccb40571e2fd459b2d5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: pudbJbaAOTjdknaPZWCjW64LHM9_grOf\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2631\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5wax0gzVWfxE3p9O2ayPQIkxUCUP5BA1yBwko0m0DVVsx7dKdezlmvVfZf2CE%2Bu20pU4CFkhcbOhRXaMq3li9BnOrPgrUQHA36BhrgT3RXiHQdcF18o\"}]}\r\ncf-ray: 9994bb0fcfcb569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":667,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"fdbde50da0728ccb40571e2fd459b2d5","sha1":"ac5f7dc43a90091fd39192051701c8b09d7887f9","sha256":"2a21db9702389f87a0ba074451da31385c3914bf9bd370c27a06bbde76a964fc","sha512":"a12167e5638e6b5aa6ea4f37d7cd3aaddeab6eb34873ac4599d344d33c852340e3cf8d42519e3e40092bbc79ef48742e5e673392945ad2d681c13c2bf389e7d1","ssdeep":"","tlshash":"d101836355d30819e595397c106204747ff1d2722b26ebad8dfef11985087d549d0322","first_seen":"2025-09-07T19:05:40.232209Z","last_seen":"2026-07-27T09:54:10.828117Z","times_seen":180,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/images/logo/logo-circle.svg","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 13:38:31 GMT","end":"Sat, 03 Jan 2026 14:38:21 GMT"},"fingerprint":{"sha1":"6B:56:35:9A:D8:BD:79:A5:E1:1B:CC:E1:5B:91:B3:FE:CD:44:0C:78","sha256":"DE:78:B0:AA:92:CF:50:13:B5:80:B5:42:17:8D:8B:D3:6B:57:6A:83:56:E3:77:6E:41:19:A1:01:AC:A4:14:20"}}},"request":{"raw":"GET /images/logo/logo-circle.svg HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 11 Aug 2020 21:02:47 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\netag: W/\"1b339b8c2b7735f5276f7558e5d6bfd4\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3346055bb53a57ebf02828b88e1ee87c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: S8rtmGPJsOIJHE1lZKExqNyvCqPQVYYJiGr7OwOJ3kare1PtR9-LYA==\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nage: 7139\r\ncache-control: max-age=14400\r\ncf-ray: 9994bb0fb9b2b51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b339b8c2b7735f5276f7558e5d6bfd4","sha1":"e93a262add5eb370050bc1e48c0fdb1eec6296bc","sha256":"98a0c776a71a6507752dc3918770f94fcee7c2cb2f544ef134dbc37b58bf63c6","sha512":"d402328f506eec67de960dac15c4063a9a7b4d78e20192cdd71e777c449d02071b670ddc869020ecff9d898df1d0c60cac3c57893a56aeb6ebaad9301961281b","ssdeep":"","tlshash":"cde092a9808c445c493bcb20e2b86881d71ed1a2a397096af95c35266f32589d48b144","first_seen":"2025-05-05T14:49:57.799041Z","last_seen":"2026-07-27T09:54:10.8632Z","times_seen":326,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/about/home3/2.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/about/home3/2.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38843\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 473 x 456, 8-bit colormap, non-interlaced","md5":"916b0b1172b92ce605ad9442bd9106d5","sha1":"f36e1caa2dbbfcb8176e704bc450dd0c076505f4","sha256":"5125578b5b20c928b80f35e4cf94dbced668c94d478079255787842eff1e87ef","sha512":"395371dd7a7c2879d9a080eacb5238658c32c28e529d2e00c14f19ea6b682e7d3d69255fc342815b59bb1b4aa6fba685dc22f87eb3061203ca728f3f67e24851","ssdeep":"768:dN+3VeuU5xH/x/4PH13X2zOFmOLXHQ4JqQggyd1kWpgR8yRsVVWxX:dYVJM94PH13X22L3Q4cQG3kQgR8yRsLy","tlshash":"820301ccb3d37f029ef19e60cf86e696cc48413e5214857bede549953ac63e4660828f","first_seen":"2025-02-26T15:15:16.418637Z","last_seen":"2026-07-27T09:30:13.192641Z","times_seen":278,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/footer/1.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/footer/1.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3357\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 81 x 40, 8-bit/color RGBA, non-interlaced","md5":"c2b641fd2b21f7fa840aee149c99e362","sha1":"0f0db5102fc98c9fe0b1a5c616f722c50d6d1f4d","sha256":"5312b2728edeb68ba72a4a61bbc704383b2d3841f04acf921455994ec52124ea","sha512":"cc4eb04a170a1171ad5ed11cba18e7255e39c6a5ce63e9edbb796015c4c5a4159b015a7575933c731b71e3b5d2687a037af74bd0ee7c9299787abd0530daa21c","ssdeep":"","tlshash":"87615e1e820a45b8b5f26a0f45f35272e8f56afd1fd42b253928c40fd720a60875d6bf","first_seen":"2024-06-30T06:52:28Z","last_seen":"2026-07-27T09:30:13.181933Z","times_seen":390,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/swiper-bundle.min.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/swiper-bundle.min.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38156\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143706,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-07-27T09:42:29.415287Z","times_seen":14719,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/fonts/inter_UcCo3FwrK3iLTcviYwYZ8UA3.woff2","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4/fonts/inter_UcCo3FwrK3iLTcviYwYZ8UA3.woff2 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apexexchangesecurity.com/\r\nOrigin: https://apexexchangesecurity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 73116\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:04 GMT\r\netag: \"6909eb3c-11d9c\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7790\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlSTx7Do5rcTwnnOyfvqZhyPBpzHJ3Tg%2F4YTPp57jW4BWfPFW78F45w0%2BotWnSKfs95voEc30jG4NivmaBuIll3aoKoOwtXg6rE%3D\"}]}\r\ncf-ray: 9994bb0e882e0b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73116, version 1.0","md5":"60b04eb8b865c18ebc9629881225ea3f","sha1":"e011916aaea9f6cbbba00b22bd45cda39bfee2bf","sha256":"7cfebba3d553c9b143bbc3544fff388f4d1fe122604d51470fd46a4babc74970","sha512":"d8031b12558271f0e264f683df6bd6b8f3dbd8de0ed3d331604e5ec9372a8a013386f9eb870b4e8d1610f6786151fd83cd4cbc5f2cc0f8996f8d855cd69b49a7","ssdeep":"1536:iPJpJutTS+KKG4ZKUOs3S6rRVIPzAyI1cnzyuOwizntkhIqu1/HwwKeTxkHS:aSGKG4T1VIky1zVOwSUIquNHwXSAS","tlshash":"f5630228586103d080f684c8eeb6919b8fa529921ff09a8809d75677d346e57dcceb46","first_seen":"2024-08-27T03:47:43Z","last_seen":"2026-07-27T09:48:29.882479Z","times_seen":7384,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/banner/home1/1.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/banner/home1/1.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74601\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 743 x 715, 8-bit colormap, non-interlaced","md5":"f86dd8222a43d7e15292b87e8814bc9e","sha1":"135f4f1d17cc559e54bba0b248c7d11dac55f8b6","sha256":"90459ff77699243b0477928582c91c6f8447ef40553e9fdc6a52f46b304533bc","sha512":"5b07918ca428d81484069fe535d935b95adf131081864e0f9a9d76bc7ea342c7105c684b75e79ff31bb6e11631a4ec02a72b7fac9c3973e359dd60c853621661","ssdeep":"1536:orV9m0kqWTqN+bbylR/Tx1VfRCCo4aab+cedvI0Sz3ZnfRwPr:oXmfqNUbylRLjVQCvb+JdI0Sz3Rfir","tlshash":"1a731257910eb679e904983ea3c888838572b98a57f59b0b0f2dc7177e17081beed1d3","first_seen":"2025-02-26T15:15:16.402534Z","last_seen":"2026-07-27T09:30:13.192068Z","times_seen":292,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/about/1.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/about/1.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35820\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 630 x 687, 8-bit colormap, non-interlaced","md5":"59af36c4eb4e0198c84bbbfdcef5fb02","sha1":"bdd2d5f2bf24033368a6cfd8a33fe0967eba03cb","sha256":"454605f320861b8ddd3bf915ab4dfcff88e6fa33d8ab9727173b79946d8e8834","sha512":"75095e537dc22306dc945a99cdc13ebfe576652860ac00e2fb8a17a2103e7dcc9761905b0bf77afe79e0b0c73c3c80451acade2178609a428436ce1555d18dc7","ssdeep":"768:hB7zxfyBRB3/8s1UmyOFP5hpk6rbCDntlGiHMZiItKXfK:htyz/80Um5dk7tlvsZvqi","tlshash":"83f2e1c3eca1c409f56a05f6a57910d2fbcac0aa0b1617656f098f464f4719b8fa7e83","first_seen":"2024-08-19T14:01:31.623349Z","last_seen":"2026-07-27T09:30:13.222596Z","times_seen":310,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptohopper.com/widgets/js/script","fqdn":"www.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 13:38:31 GMT","end":"Sat, 03 Jan 2026 14:38:21 GMT"},"fingerprint":{"sha1":"6B:56:35:9A:D8:BD:79:A5:E1:1B:CC:E1:5B:91:B3:FE:CD:44:0C:78","sha256":"DE:78:B0:AA:92:CF:50:13:B5:80:B5:42:17:8D:8B:D3:6B:57:6A:83:56:E3:77:6E:41:19:A1:01:AC:A4:14:20"}}},"request":{"raw":"GET /widgets/js/script HTTP/1.1\r\nHost: www.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self' *.cryptohopper.com *.hotjar.io *.hotjar.com; object-src 'self' *.cryptohopper.com partners.liquid.com widget.changelly.com *.intercom.io *.intercomcdn.com cdn.paddle.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.tradingview.com *.cryptohopper.com *.intercom.io *.intercomcdn.com ajax.googleapis.com cdnjs.cloudflare.com static.cloudflareinsights.com *.shopifycdn.com *.myshopify.com sortablejs.github.io cdn.paddle.com www.googletagmanager.com *.hotjar.com *.hotjar.io cdn.jsdelivr.net optimize.google.com partners.liquid.com widget.changelly.com s0.2mdn.net unpkg.com wchat.freshchat.com cryptohopper.webchat.freshchat.com cdn.plyr.io cointelegraph.com s3.tradingview.com connect.facebook.net d.adroll.mgr.consensu.org d.adroll.com s.adroll.com cdn4.mxpnl.com ssl.google-analytics.com bat.bing.com s3.amazonaws.com platform.twitter.com cdn.syndication.twimg.com cryptohopper.us17.list-manage.com ajax.cloudflare.com www.gstatic.com js.stripe.com www.google-analytics.com www.googleadservices.com www.youtube.com www.google.com googleads.g.doubleclick.net static.doubleclick.net cdn.segment.com fast.appcues.com www.googleanalytics.com www.googleoptimize.com assets.customer.io code.gist.build; connect-src 'self' www.tradingview.com *.shopifycdn.com *.intercom.io *.cryptohopper.com *.intercomcdn.com *.myshopify.com *.shopify.com *.cryptohopper.tech *.hotjar.com track-eu.customer.io *.api.gist.build *.cloud.gist.build ws: *.cryptohopper.com stats.g.doubleclick.net cdn.paddle.com api.appcues.net fast.appcues.com api.segment.io *.google-analytics.com *.analytics.google.com widget.changelly.com api.cointelegraph.com wchat.freshchat.com *.hotjar.com *.hotjar.io saveload.tradingview.com cdn.plyr.io cdn4.mxpnl.com; img-src 'self' blob: data: *.cryptohopper.com www.google.ie *.coingecko.com *.intercomassets.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com cdn.paddle.com cdn.jsdelivr.net img.youtube.com *.giphy.com res.cloudinary.com appleid.apple.com sync.taboola.com widget.changelly.com assets.coingecko.com stats.g.doubleclick.net www.google.nl dsum-sec.casalemedia.com ups.analytics.yahoo.com pixel.advertising.com pixel.rubiconproject.com sync.outbrain.com image2.pubmatic.com ads.yahoo.com trc.taboola.com eb2.3lift.com x.bidswitch.net idsync.rlcdn.com cm.g.doubleclick.net us-u.openx.net assetscdn-wchat.freshchat.com s.adroll.com d.adroll.com ib.adnxs.com cdn-images.mailchimp.com cdn4.mxpnl.com s3.tradingview.com bat.bing.com chart.googleapis.com pbs.twimg.com abs.twimg.com syndication.twitter.com q.stripe.com www.google.com googleads.g.doubleclick.net i.ytimg.com cdn.plyr.io *.google-analytics.com *.analytics.google.com www.facebook.com maxcdn.bootstrapcdn.com www.googletagmanager.com optimize.google.com track-eu.customer.io data:; style-src 'self' 'unsafe-inline' *.cryptohopper.com *.intercom.io *.intercomcdn.com *.shopifycdn.com cdn.shopify.com *.hotjar.com fast.appcues.com cdn.paddle.com unpkg.com cdnjs.cloudflare.com widget.changelly.com assetscdn-wchat.freshchat.com wchat.freshchat.com stats.g.doubleclick.net cdn-images.mailchimp.com s3.tradingview.com cdn.plyr.io fonts.googleapis.com maxcdn.bootstrapcdn.com platform.twitter.com www.youtube.com optimize.google.com fonts.googleapis.com code.gist.build; font-src 'self' *.cryptohopper.com *.hotjar.com *.shopifycdn.com *.intercom.io *.intercomcdn.com *.myshopify.com *.shopify.com cdn.paddle.com cdn-images.mailchimp.com widget.changelly.com s3.tradingview.com fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com; frame-src 'self' static.cryptohopper.com *.intercom.io *.intercom-sheets.com intercom-sheets.com *.intercomcdn.com *.tradingview-widget.com buy.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com create-checkout.paddle.com widget.changelly.com plugin.partners.liquid.com *.hotjar.com cryptohopper.webpush.freshchat.com wchat.freshchat.com js.stripe.com *.sumsub.com renderer.gist.build code.gist.build data: *.cryptohopper.com coin360.com coins.gourl.io platform.twitter.com www.emjcd.com cj.dotomi.com www.facebook.com cdn4.mxpnl.com www.youtube.com www.tradingview.com discordapp.com s3.tradingview.com s.tradingview.com googleads.g.doubleclick.net www.google.com www.google.nl optimize.google.com; media-src 'self' blob: *.cryptohopper.com res.cloudinary.com *.intercom.io *.intercomcdn.com *.shopifycdn.com *.myshopify.com *.shopify.com cdn.paddle.com widget.changelly.com s3.tradingview.com cdn.plyr.io; child-src 'self' *.cryptohopper.com *.intercom.io *.intercomcdn.com cdn.paddle.com *.shopifycdn.com *.myshopify.com *.shopify.com widget.changelly.com plugin.partners.liquid.com www.youtube.com; form-action *;\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 16015e09e0d70f7cc17ec5c4f52b310e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: fTNs2aF4NP5ZdBkDI_OQ2Wl2X1ixOVoET-AQyjQq-84FN_VMtiAi1g==\r\ncf-cache-status: DYNAMIC\r\nset-cookie: widgets_csrf_cookie_name=7054a0f8ad36fbf9c763f2f3b0784796; Secure; Path=/; Domain=cryptohopper.com; Max-Age=7200; Expires=Tue, 04 Nov 2025 16:16:41 GMT\nci_session=8nhbvg87krjb38g87e6eonlg2e7rqlbf; HttpOnly; Secure; Path=/; Domain=cryptohopper.com; Max-Age=7200; Expires=Tue, 04 Nov 2025 16:16:41 GMT\r\ncf-ray: 9994bb0679c2b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":26729,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (574)","md5":"8499c3b86de4df25542c2f9f78d8a79c","sha1":"3942a2674cb09241e3598eb3d6403e3d2c2b09ff","sha256":"d67aaeb25ce9e34bdc18b2d3ba099086b1c3e5f3cda04edebcb14f826e5a78e4","sha512":"2a7103879757369f94970215e8e1d51255a567118cdefa1147396499dfe093175ddd63b579e790d1df3d4c2dd4ff4043ebeccd917124c6635654adf928d6daba","ssdeep":"768:DPFqnpKxIFoN7jGS9yp8TaA/ME0pwKfID8gXATtIpEmR7/7Scrni6NFDjdmyXRs0:RqnpKxIFoN7jGoaAUEyTOPncyXRsYxuK","tlshash":"54c20919f640b4bb027762aab43f5316326779e676020450a06dd9f17efcd882337f6a","first_seen":"2023-03-08T06:37:48Z","last_seen":"2026-07-27T10:10:04.412046Z","times_seen":624,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":4,"connect":4,"send":0,"wait":548,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/fonts/mulish_SGhgqk3wotYKNnBQ.woff2","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://apexexchangesecurity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27400\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:04 GMT\r\netag: \"6909eb3c-6b08\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7790\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3e%2Fxs3NRqYYdPqnw%2Fv9y3zE7Z2gcsHLxWRjc%2B2VGcXG%2F3QDgGeHLnCsuU6klHM%2BURmjVQa9ofsI%2B3O5Xm1fd%2BGTEblNYKwaldc%3D\"}]}\r\ncf-ray: 9994bb0e88270b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27400, version 1.0","md5":"d96e6550e1c6b3063f60875bfd4a0870","sha1":"c1b22f0d075bd4413686866134fffcccb3f487b8","sha256":"577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8","sha512":"8446c25d840412230bb91806faab73de9dee5da6a8aae2c980431879d749ca8090d6879e6f42e3be27b416a00ee759dee2febc34df97c3ffa81ae15ce2196802","ssdeep":"768:F4xt+sRZS5Y1nK6uicEP3rhaxoQAoF6jLIRt:F4x3fcUrhOoK63IL","tlshash":"4dc2e10fe287737a5418f23ea969c86e365865503a2e67f1dc1a3ab51e18137b3c4f50","first_seen":"2023-04-08T09:21:33Z","last_seen":"2026-07-27T09:48:29.897394Z","times_seen":9293,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/325/small/Tether.png?1696501661","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/325/small/Tether.png?1696501661 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2160\r\nx-amz-id-2: ECJ4YMYrqtrzEeiKBqq+UMGF3GHGaSw0bg5sLIGgZzdQ8QKpH12g2d516yJuINDttqlBKoCaccA=\r\nx-amz-request-id: 8EPQWYTE0GWMVBBD\r\nlast-modified: Wed, 29 May 2024 02:52:40 GMT\r\netag: \"a660dd0441f12c1508a01e9d6fb031b6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 4i980wcjLJoyyC8wC2GZV9m9QQopYfgQ\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 4443\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQYeUADEAvSiWS8635cwstiiRisK%2Fj8HcjlaGO8mImxmVAn6SkTgq8MF9C6YXv32SJES8IZPtKduUkhjdYyp5hEBgylQGRUn8QR%2F6jrnB3%2F%2F87OfFPVR\"}]}\r\ncf-ray: 9994bb0fbfc0569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a660dd0441f12c1508a01e9d6fb031b6","sha1":"e8c9e706c53d93f428e1ccbc9b03215bbbb615d6","sha256":"7af4e2d2b12bd67001e64e389a835c9611145b42feeefd98ed4974d1aefb6f16","sha512":"692311b4a08e63ac8a8200774974777cb2f34d9c08a1e62f3fa7f6bb7bbdafe88b0abd81ac6087d68317968ea397e04e0a5bbae62d34f0b1b685598888bb07a0","ssdeep":"","tlshash":"2b411ac98a00f0a4f1d04abbd27845d181339f7696f62cace4d4f00dac0a2bb5a9d797","first_seen":"2024-09-19T19:38:42.356599Z","last_seen":"2026-07-11T19:12:32.183805Z","times_seen":316,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":41,"dns":2,"connect":3,"send":0,"wait":9,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_389_0/static/js/chunk-WidgetIframe-fbd1d6b87612fc45ab27.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:43.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4/1_389_0/static/js/chunk-WidgetIframe-fbd1d6b87612fc45ab27.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909eb3f-71e4e\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 7790\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhetIHPY9p1OjIwIz0E1c0Df4B9XEzAj1cDXRroEBkQw%2BgFKkoQpd9d1%2BEignCOAdzm3ieOCqTnRAw6guBpiVWxDo9C91UCwnV4%3D\"}]}\r\ncf-ray: 9994bb14def10b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":466510,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5627a5694eb4c794f594eb2e0bee3931","sha1":"cb7c700b9fa88f4cc9af13cb6e85bd8f5954c5db","sha256":"4668dfc7122849bea613e423a71738d96a3e757952c5387d3e6aece3328dcefa","sha512":"554a9725485538e7a4e41611974baa9ce0b1fe1897426766b3bd0bd7f558ab034d2dde0567f105b4f6e871ce1cd6418cf5ace849a24ccfbc8032bf8d342b25ee","ssdeep":"12288:T1UffmSSqZhMfLB9s7sI9IF2mHKP08zRz:T1UfJMd9s7sI9IF2mHKP08Fz","tlshash":"f3a46dc372c3746cbba752aad4bb540d753e345d794880a8f6bca868188a5d46333fdc","first_seen":"2025-11-04T14:17:18.384683Z","last_seen":"2025-11-05T12:14:35.066701Z","times_seen":17,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/service/1.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/service/1.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1538\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e3fb24ee1841ba88adac2249e784064c","sha1":"ad3165e89de8366ab3bb17e5e2212f370affe961","sha256":"b4b4e8e9f36cb382d8bf1a5b38d163237922ef3fe70a58d44aa2807d741a8e78","sha512":"b820c70806596c7e071ced6f7e04d1cd966145bf7c72b612bd309d254537e9952eda55edc2fb630235827a1ccab9ebdf08a4d01eb892490909e7589df1f0a0ff","ssdeep":"","tlshash":"223107ea818f9ab3e68c022ab16c07906ada884e1048240c413efef8864312115c788f","first_seen":"2025-02-26T15:15:16.403553Z","last_seen":"2026-07-27T09:30:13.180379Z","times_seen":345,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/about/home3/check.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/about/home3/check.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 690\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 32, 8-bit/color RGBA, non-interlaced","md5":"715d244f350051b1e4a6768ee7cbb968","sha1":"503a40ce5968f6a243e1a27aab671244ba4e25d5","sha256":"02c9a14ac2b62b78680a5e3b1f38fd80d71c3cd21835b6987f22d4e9fdccedc9","sha512":"a9a5c926811512f92f0fff09f78a051d98f8cae214975cfc2998b7d9ace1c449f0fed31639cdb6d6f2f60a708b814a7f1b18aeed5a6f8b74071bea90a8acdb9f","ssdeep":"","tlshash":"510144cdfd3a9d9d7c3a0cb40203637a5811712985415cac2577b4aef804ed0dd83281","first_seen":"2025-02-26T15:15:16.415146Z","last_seen":"2026-07-27T09:30:13.217461Z","times_seen":298,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/v1.0.1/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 01:13:19 GMT","end":"Fri, 30 Jan 2026 02:13:17 GMT"},"fingerprint":{"sha1":"A0:B5:F4:1E:19:9B:FB:1F:7E:CD:06:F4:E0:DA:18:6B:81:9D:A0:08","sha256":"4B:83:DA:FF:46:EB:CB:67:EB:CB:91:6F:7A:26:EF:20:87:EC:24:30:E6:C9:B6:45:2C:1C:7F:EE:FF:01:9C:6D"}}},"request":{"raw":"GET /widgets/v1.0.1/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 22 Jan 2023 16:47:12 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 02 Jul 2026 08:17:20 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 10821560\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8kw9%2FUgf52fY26g2dPyj2Dq6pCRgp2eQ6uxN9bIPholj6oBuWKrCFKoirxbCSrywioyjbf9wdWbV9UXGhKFu32eEw1%2FVLdMD64Ze9E%3D\"}]}\r\netag: W/\"63cd6890-5a2f\"\r\ncontent-encoding: br\r\ncf-ray: 9994bb0689dcb505-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23087,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"967881e065c4aa0b6fe543676792f033","sha1":"310f4f6458514defeed392bffa9bb95a7a31a539","sha256":"7cd509a09d5929c266a12f484c94e00e003d9c5286c83430c155fc2759839496","sha512":"5aebb4d6b97ac0ed67a45c1c244fb75d18ddeb167e23df6f506cf08c4e53517d44d84bfb0edbe9a895502d9485c6693935d6c2dcd8d7c9f0ecc8c74b6858e98a","ssdeep":"384:GzCKMPZATN09o0mtmwfEXZb5TZ8dDsSCnfwj:GVMhAh060smwcX/T2dqa","tlshash":"21a2c76921b3003a49531265efff161c607a02b78004ec24bfaeddc2cf959e98aa77d5","first_seen":"2025-07-03T01:31:39.072952Z","last_seen":"2026-07-27T09:07:40.766278Z","times_seen":278,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":13,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/webfonts/fa-brands-400.woff2","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/assets/css/all.min.css\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 108000\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":108000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 108000, version 771.256","md5":"83a42241ada98e0f959353ca0c3ee027","sha1":"f1234dff4095688c945513d40751012b70462c03","sha256":"f461742308b7791fee6e9698e1212aa6e8fd1d5e5b41795bfd68e93aa011073d","sha512":"ee0e9c9ebe49a00924f01c5d992f6d987cf5e579e7d593dbededb31b20eb16beb5c583229d476b38cd431c8bddbfe11e8bc62944caad890048e5685d479e9516","ssdeep":"3072:n1gbLdJ3FD1tq/bSfzUA8KdmDy2aoQDPx:0hFD1tq/bSryKdmTaosPx","tlshash":"5eb31208cc5d6bbfc84e468438c057a93c727e78a17272f318ffd5a454af3aba981845","first_seen":"2023-04-14T21:22:23Z","last_seen":"2026-07-27T09:40:14.448868Z","times_seen":1829,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1/small/bitcoin.png?1696501400","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/1/small/bitcoin.png?1696501400 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2514\r\nx-amz-id-2: n80Do7F/ggwjgNYiPcBRCvWWhCes+Xj5XzG2JOQIDcZdaVOE3d3caAErjGmVkhXc79L7M4HmD6w=\r\nx-amz-request-id: FR7RVHGJ9P48BZJF\r\nlast-modified: Wed, 29 May 2024 02:28:22 GMT\r\netag: \"a8850cb1a50f04f848166f3a66f34b5b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: faIEgcgn_dbVO8zzWUh0AzJSg6B5kdIv\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2632\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6q9G7SPFbioXJg%2Bc0vtTOOCNEbtU1kiZVqscyMIRQKXkg7XzLxCVKQ1sCoG%2BW%2FI%2BJ89qJgVh2c9zJgB%2BSw%2BM6iY2FbIUCbhM9VvlFSQU%2Bp6Aj37FT%2FEz\"}]}\r\ncf-ray: 9994bb0ffff8569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a8850cb1a50f04f848166f3a66f34b5b","sha1":"abb87f27a7fdec4738714c7d22fc9ec1218e9e14","sha256":"6ab43dedc21519e1974d8a73f07f15f029ea7598d733201af3fc06fe9344256b","sha512":"96a0946e9d3757a2bdf7ac48c43a1ce920aa3c48110898a20ebcec67f1c1eebad65ff960097e626c7078c653e35851034ccde0b3f572859483086cc38f8a85da","ssdeep":"","tlshash":"c4514cdc3831403cd1bfaf6a341e1110c47a75c9a36d9c04b894fee41a7c994f86cd85","first_seen":"2024-07-19T21:45:37Z","last_seen":"2026-07-27T09:54:10.844173Z","times_seen":634,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":82,"dns":4,"connect":1,"send":0,"wait":24,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/2518/small/weth.png?1696503332","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/2518/small/weth.png?1696503332 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 6128\r\nx-amz-id-2: o+kJ5bfWYw0qNsOtlqctSFbXHumadq5T9vuyjReFj0qirviMR5eVlt42k4z94nYONyvLkswFL+F0Vs1puD+rMG4OeW9+9ElzsiCpTnJ65V8=\r\nx-amz-request-id: PAP7CF4DWTX3THH8\r\nlast-modified: Wed, 29 May 2024 02:45:22 GMT\r\netag: \"d5aebd87ff573f9a3da2263444927cf4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QG4lTTUf0DuolRnjjIVNuBbLcO1y6nGQ\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3028\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0DzGx6zzntjV2sK%2F31aYP8pbQHLyX2vkPu%2BybMnlOHzPIPtzqQ5J9YX6hIewmJ0QMTCSD0tncBFNayqhLwzEtpVeg7nxDcB%2FXeDE%2B7aaosBgc4juEniS\"}]}\r\ncf-ray: 9994bb0feff6569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6128,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d5aebd87ff573f9a3da2263444927cf4","sha1":"4c3eb9fd3328a9eb7d86f88bd31d86cc812b9b7d","sha256":"e90786b8724012ee925eb64b2a60317b90ce350893fea571d6bbcfaf66642e05","sha512":"b0532f2c1fac98e4fcb2bf980d75d9b2d782a6b1902810784282f86b84db14c29a9d3ca762aba2f67edcb0b20b4268eeb1f98633b99d537c700b625950e4df6c","ssdeep":"96:2vomlgugc+f5zI4twOl+7whXPwGFP6Ne4vQx2k/TQvY3xChmN/h3WaBmeMU:2vojugBJlkwhXPZFCDYCY3kA7W3eP","tlshash":"9ec1afd669b2b429e931c6914343233aaa5d5b1db54434785007f90baf0dcec3b80b8c","first_seen":"2024-12-22T02:31:25.210538Z","last_seen":"2026-06-16T03:20:35.815518Z","times_seen":201,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/css/style.css","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28955\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":259740,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1852)","md5":"5e99a0bf63525b70fa6fbfdd443aa709","sha1":"9c632620bc561fe154739ead12b2ebb255883f54","sha256":"8594d354f39431f42df5df862d9f59b5230854e8eae3150403972e95c68a789c","sha512":"fe627892ccb2b40159bb6cf4789432fc74ceee61c5b8b8f9f3bd2f5958dfe30e3832b64898072ee2882bf31cfe00751196fa20c2b6ae65d80bd9f23223bf6314","ssdeep":"3072:z8btA58BUxsaAbG9rApJIypgCasEPDnbBDHQmsk4MF1Y:z8btA58BUxTAbG9rApJtasEJDHnH1Y","tlshash":"0d44b5e8ade615093027e23c47ea7758377c9403d71d9fa4bba512688f863f8907368d","first_seen":"2025-02-26T15:15:16.382067Z","last_seen":"2026-07-27T09:30:13.193733Z","times_seen":216,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/1094/small/tron-logo.png?1696502193","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/1094/small/tron-logo.png?1696502193 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2279\r\nx-amz-id-2: htNPoONDuflX6SFcNyk0+6seEIymwyMwfZuUFFbOOhFyB59iN8SkLI5WKGfdlNoKccQa2MzeCts=\r\nx-amz-request-id: A1R9GFG5J428V1ZQ\r\nlast-modified: Wed, 29 May 2024 02:29:24 GMT\r\netag: \"ea60ede82147e3f806ac55350af285b8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 2X8LxLSUEwZ6.IqWCgYu7HlfXa.JQWpD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2632\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NfmWWOng9HSrd2qT9RT8PM8PaKumh%2BvAmFcx4wT5CQ0hO1oIGH19lJRyQWsLylJtVSf%2FoRbvZS%2BHXWBuo4IZ%2By5ByyMtnaX%2ByNc6cAz%2Bjc2i0T8fCyzf\"}]}\r\ncf-ray: 9994bb0fbfc5569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 50, 8-bit colormap, non-interlaced","md5":"ea60ede82147e3f806ac55350af285b8","sha1":"37645bedcddddbbf4c798d321753f09cb7cfaee2","sha256":"b6af3ba61a19665204528ae74150a45313600f8c130b24e0a5b17329800784e6","sha512":"668db58ab23c0cf29bb08a925d80455365b547bcb8407ebeabb0d252f4574ff2518a0494b5d7ad70355cabc3a911af40cbd4c479bc3a51741af144ef34efe6b6","ssdeep":"","tlshash":"b541d6e17c6651a4800119641c135a7ddce0f2922bc86eb5b633f9806d14f8a94daeb3","first_seen":"2024-11-06T16:01:50.631097Z","last_seen":"2026-04-06T06:12:45.918616Z","times_seen":290,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//tururu.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4//tururu.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:04 GMT\r\netag: \"6909eb3c-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7790\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhj3T7pq1P6pgxn%2Fik1aQHzMWR%2FuUMcgKXQERHicAIcbIEl9pYjXjEV3CT0OQnty9BMtLiP5Q0Jgw907fVMYjjGDtq5eDXuTJT8%3D\"}]}\r\ncf-ray: 9994bb12dccb0b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-07-27T09:48:29.881571Z","times_seen":9251,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-04T14:16:39.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":51146,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (379), with CRLF line terminators","md5":"87c917343fb24e27b2d18ed437cb6cda","sha1":"a48628592bec36f7f682c65849df17defa677899","sha256":"c17ee7b330fefb473521a0c021e1ab7e205cf47eb0ea3b4e882471cb5c028dda","sha512":"54a68ab7fc658902bf5d015c0743474c5cefe4cb9956295224e4b8674b2976654cfa9c048443b5b6c21acfd03e7af30684d7aa0eedf9cffd04818bccffe418c2","ssdeep":"768:Qc9g62pp3C1LRqU/7mQ/8vv6sH5cBPe9Wd11mEP3Sn3y4nbgX29yM:dy62pp3Cnnf9pe9Wmr","tlshash":"31330d2034cda57b012362d39231bba9e69fca31c726506af3fd27771be2d10ad17465","first_seen":"2025-11-04T14:17:18.427567Z","last_seen":"2025-11-04T14:17:18.427567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":351,"dns":121,"connect":107,"send":0,"wait":151,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/partner/light/3.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/partner/light/3.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1905\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 122 x 48, 8-bit/color RGBA, non-interlaced","md5":"cea520daadf761609621f409f78db1a5","sha1":"917d218d81c4d19f8c27fc204a0a1d0d60318c3f","sha256":"127093749ecbe41142ceafeef44f127556224bfed629d4d82ca865a5eff4a91a","sha512":"0080f6d11e314f046615d206a0f1bc63958eaeb791b4458aaac552fdd6dd6d6127abeb7619955b2319b66fd4613bc699aa2e4e6aca64a4c4ee80740032cd5c5f","ssdeep":"","tlshash":"904119de49ee95bc961b60530d481cab3c07ef5e0c1178d4ce874b37794e743b881a81","first_seen":"2025-02-26T15:15:16.400774Z","last_seen":"2026-07-27T09:07:40.781836Z","times_seen":268,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/anektelugu/v13/LhW2MVrUNvsddMtYGCx4FcVWOjlwE1WgXdoJ-5XtPnVy.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apexexchangesecurity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43220\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:39:59 GMT\r\nexpires: Fri, 30 Oct 2026 09:39:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:10:30 GMT\r\ncontent-type: font/woff2\r\nage: 448602\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43220, version 1.0","md5":"197ad9df561892b41478b747aa2d7998","sha1":"4ed5d7fb0987ff7c4e8163ec45499c9729e49e87","sha256":"dee3a6583f4fa45f0ccb0e1879b50c96639ad59d5e5e6e73ddbe7505be07fe3c","sha512":"00e757f0a9826ecfea7d0c3567be6b5c9d4f15e875429e588b94554083484abcd3e13244215fe34c90fbd0597f9bbf1bf4d61abcf32d6dab1536ed849c9f9d93","ssdeep":"768:HaCng4UVdxLV6SO8Vx7v/4wADi1IvIwOGcDjZjgySPocr61Rjc+6sMAQeqBG:HdgXV1JjADkIvlOfZjJK21Rjc+6sMCqI","tlshash":"0113f2b79522c88e446b25fe76a71781ef8a8dd13b8f04221cbff8d42544741abef158","first_seen":"2025-09-21T11:59:02.801313Z","last_seen":"2026-07-27T09:40:14.350252Z","times_seen":250,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":139,"dns":1,"connect":20,"send":0,"wait":37,"receive":11,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 01:13:19 GMT","end":"Fri, 30 Jan 2026 02:13:17 GMT"},"fingerprint":{"sha1":"A0:B5:F4:1E:19:9B:FB:1F:7E:CD:06:F4:E0:DA:18:6B:81:9D:A0:08","sha256":"4B:83:DA:FF:46:EB:CB:67:EB:CB:91:6F:7A:26:EF:20:87:EC:24:30:E6:C9:B6:45:2C:1C:7F:EE:FF:01:9C:6D"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nvary: accept-encoding\r\nexpires: Sun, 25 Oct 2026 05:53:45 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 894176\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqh9d%2BG3sF78sxG27t%2FKx4lMKcAH9g1YmTZFDtqK0WEO3rVLhk%2F9vxDlPcoEC%2BRLFKRphYFc6pzPRyCd0Hg49vSXu3BIdYtKRwpL1Lo%3D\"}]}\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: 9994bb0c3f2eb505-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-27T09:48:58.109046Z","times_seen":13556,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/13442/small/steth_logo.png?1696513206","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/13442/small/steth_logo.png?1696513206 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2399\r\nx-amz-id-2: w2AH/AqNs8EtvKkkhRk+oCJAw4DW+s9sO3C6/LhwEdcp+ZCDztSOzc2O3r2chfL/15OxFQ5tt3o=\r\nx-amz-request-id: 0NENV54488HX6DWG\r\nlast-modified: Wed, 29 May 2024 02:32:21 GMT\r\netag: \"540e7728a0b6d54d05412b981cde9f1c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: byzlxdDpHbYnwu1.Q_jVGBJ0UiWtSPmF\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2632\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JzKeHs%2BT8ZgYO5UsMZL4jxUIzmUb4SpttqtI0QTwvE0aXJvcRtaE7o7s9rm2W1rogUMQnLoWZMpmaJjAvySf5p6TllPNfak1bJxIWZeEh6ykhxnfqSFn\"}]}\r\ncf-ray: 9994bb0fbfc3569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"540e7728a0b6d54d05412b981cde9f1c","sha1":"62e657b7591d9a409a8273089f50de9f27c52003","sha256":"cbfe677ee78f8e9fb1297e76599b517009cbb41faf640e4d194a263c5a1256f0","sha512":"fea5eacc3ba95683555c0864fdf042c6a43793c7b34ceeab028f136ef4fbe99270d2be7bcfcd1d4577f0b6ed34daba8d58ab887b4d57d2cba98ff160bad14334","ssdeep":"","tlshash":"5b415dc0e40092b98d570dcc4285295a1eb5f8fb03e6cfc1a4143e4e0a995a034c2f7c","first_seen":"2024-09-19T19:38:42.343643Z","last_seen":"2026-07-27T09:54:10.88627Z","times_seen":386,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/custom.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/custom.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2391\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11212,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"8adda41789a33dcdcecba4f0f498b786","sha1":"584f54be52b3f1435c4596de8fcfffe150285da6","sha256":"2f2f54be4c4ad3f6b5d16bcb89623e367ce03624ebf26ceb82476567633d51a9","sha512":"d838ee08db5de68a1e839d697ffe733014d40a49e6921719888eade3a05848f6583fd3dd1955cb0c3015d9fa05cdaaa3638168c296c4e7e6f83fd551201255aa","ssdeep":"192:cYZMn4UyWe1yDMAtS2NjmM0dicieym8GHm+dgfqzfsweGQQrvZm:cYZMnrvK+MAj90dicizMgC5rQQrRm","tlshash":"4932631498751032007b717bdd9f5380b2b36047a9acbe31789e85484fa8b7e52fa7f9","first_seen":"2025-02-26T15:15:16.438731Z","last_seen":"2026-07-27T09:30:13.138727Z","times_seen":265,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_389_0/static/js/widget.fbd1d6b87612fc45ab27.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4/1_389_0/static/js/widget.fbd1d6b87612fc45ab27.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6909eb3f-7a646\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 7790\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYYIBUyl1ovEPeZOz7FdBSIydvaOIZPPcMg4uTZLRisE9t55TgSk7Gs1rn8JSZYV9h7f2m3Myv0MJvWU89hekwoa5JKGhP4foWs%3D\"}]}\r\ncf-ray: 9994bb0fc9660b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501318,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a3ee6dd76942d07e9cdbc5708c0a7e94","sha1":"d6db809578499c384db9352aeb3d5b85ab1dc31b","sha256":"e13e2e0f67f659a4d3b42cf9c733a9a2239d3a9fcd4ac295a22990c04c320fdf","sha512":"84f4290917bd3fee1822f4633e426428dbd185efec4166c8621d9530662f68ed2f29848d45e41868f1ebf7d492bad351e87cdf1422c3d6765f314d7eab3bacb6","ssdeep":"6144:xuuK1pPehbIeTuE/h4xL6W6b/9VwTS/M+kiH01q+02/3ishg:UuK1pPehb9TY69bwTOHnk3Lhg","tlshash":"5fb407d871d2f06207f311b6407f150bb33a195a380d8450f624edeab97998ea277fad","first_seen":"2025-11-04T14:17:18.434004Z","last_seen":"2025-11-05T12:14:35.127132Z","times_seen":17,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css?family=Roboto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://static.cryptohopper.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Nov 2025 14:16:41 GMT\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5548,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7f568d4a7f96c6c3aeeec413a721afa0","sha1":"bbd830cc641779bfea6a82ca5474762c2f9909a0","sha256":"623e85537b5dcb38396517e60c7286be6ce8ff7454e87b30af4f754a92fd2d05","sha512":"b0ce21c1052f668f985f42ce70f66f26fd0239a45ae448cc200f41bbb1f449ea6d399c7bd630458e685d4bcb635f7a5a6643780e276f9a5cbe0930e9465df234","ssdeep":"96:1OEMNllOEMNsFZKOEMNWOEMNVTOEMNVy+aZjzBrgOEMNIubqGIFuV4yOEMN+ROEG:cNlsNuNHNVWNVq5NfbqGIwV4DN/NzyNY","tlshash":"d1b1fd910417444097835ce227ce7e34fe1f92006184d0b9ebfd9b6beddbda652a836e","first_seen":"2025-09-09T08:19:16.336505Z","last_seen":"2025-11-18T22:34:28.266584Z","times_seen":5086,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/about/home3/1.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/about/home3/1.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30356\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 402 x 473, 8-bit colormap, non-interlaced","md5":"4c942bccf58527a1b2164947b8718e7f","sha1":"24830d9698688a2b3ac51cab7b05880e2172cffd","sha256":"ed7fe892b4703985cdaef2c1503d7584214fdec3238e4e21d4f060bd3226828a","sha512":"45e168d816df0c75aaf1e80987670c61ecff816c5faa73a5d93f177005a78dae39c1e5a0b56e46a81395804a72e9a81f48664d5b11759a877bdf8019451b0552","ssdeep":"384:py3TY4BSxHVEP4UFbO67VwrvzxP9ZxVY0P2Pl4Jl2w32WcsxZnF8gYYA8fBj66X+:eTY4BisLO1108Us8gDnf19wCS","tlshash":"dbd2e1dd8aa24f88f066073ee63511724f55d7aa0231aedff681811c639e51c0de9dec","first_seen":"2025-02-26T15:15:16.422854Z","last_seen":"2026-07-27T09:30:13.143254Z","times_seen":256,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/feature/home3/2.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/feature/home3/2.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30729\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 243 x 168, 8-bit/color RGBA, non-interlaced","md5":"24f05ed35dc47b5e8628794a541f1047","sha1":"2f8c89609a4ddb71cdefd6443025e5ee0dd143e9","sha256":"c889f85abdf01ac4776e83d920f7778028cc4e83d75522a8f550f9fa427ef2a6","sha512":"b3b9e29a955b9ff57a937ec55d1766a6048c61c6afca5a0c84be7180c02b3a1658e421df93ef91764d3785205ccac6fd5e5af3e647d265428710527487dc908f","ssdeep":"768:QmMUTPLqUcHlhVokqW0zpUlOVUwIQdOHbQ:QmPPL7cHlhXq9SFZMGQ","tlshash":"9bd2e1646142722b207da56587057efcb62f7456bd71e6f8a46380d80edea0438b3ff2","first_seen":"2025-02-26T15:15:16.420751Z","last_seen":"2026-07-27T09:30:13.222091Z","times_seen":300,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/feature/home3/6.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/feature/home3/6.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3565\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"434facf1f64f3112e71064255e9a9333","sha1":"043b6ca41aef31a2c3de1b04b9d385b798512827","sha256":"5f3bae46fc6a57f0f5d246d21f59fb12927c315c9f84d3cafe30d0bfc18b60f4","sha512":"836ee40b802a593d6210dc15c2c0905cc4591097b3c87242d908f2020bdc53745bb5e2fa7c9d68972ab12e14182cb06278f90a006af7f050e2c7480185379ee3","ssdeep":"","tlshash":"fd715cba67d9353ca658f3a31f784250f4bb60abea35244d2a6e07f183184c15b0fb15","first_seen":"2025-02-26T15:15:16.425846Z","last_seen":"2026-07-27T09:30:13.212473Z","times_seen":295,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//tururu.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /widget-v4//tururu.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 12:02:04 GMT\r\netag: \"6909eb3c-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 7790\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYIxsulHjjoCrFygaTzzQSe5oqkGlwTD1x97%2FI5J0UZqQjp%2Bro9n4dUy6krOSOCaLKWIMBdLFIziEVkXRHg4lh0OKt%2FYO8kDyic%3D\"}]}\r\ncf-ray: 9994bb0ec87b0b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-07-27T09:48:29.881571Z","times_seen":9251,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/icon/check.svg","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/icon/check.svg HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 374\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":786,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c147b8c9e14ac7bffcce081046758ff","sha1":"81f375468374101a4cb039772aee7297c6704744","sha256":"b6687776abeaf423555dca32094dc7f4e8c10b2be4be985d1ada72ae117f6121","sha512":"51fb68c52d6195643634bfd295296366a170e2946e944261689b01b69bd221838b565f04ae4b71a7455fc292ccd38047af1d04489abd9fef321526a385151226","ssdeep":"","tlshash":"9a01201a239c453cba2a4ba0eb497574a9363262270dd4009334e9750ad809ebe3f5dc","first_seen":"2024-06-30T06:52:27Z","last_seen":"2026-07-27T09:30:13.11384Z","times_seen":305,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/bootstrap.bundle.min.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22431\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80421,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-07-27T09:40:14.33666Z","times_seen":17690,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/hp9nmatjq3d9mw8xzpr5bxa27eawfj26.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 13:54:00 GMT","end":"Mon, 26 Jan 2026 14:53:54 GMT"},"fingerprint":{"sha1":"21:DD:35:4B:CA:0F:25:19:3B:89:7A:E7:5A:96:AA:79:2F:10:DA:60","sha256":"5B:FF:69:6D:19:50:43:43:77:84:D0:DB:19:32:2A:DD:5C:C5:F1:66:FC:14:9D:62:65:46:9B:F0:A7:25:30:F1"}}},"request":{"raw":"GET /hp9nmatjq3d9mw8xzpr5bxa27eawfj26.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://code.tidio.co/widget-v4/1_389_0/static/js/render.fbd1d6b87612fc45ab27.js\r\nserver: cloudflare\r\ncache-control: public, s-maxage=300, max-age=0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9T1UFvSNx07lBO0FBHzMJMAhbNUeHvie9L0QvedcufWUDJC88eK8dyki5C1e7U0hT9h58ebTpN7xOLYq6GS09SurBuMzTc5YtA%3D\"}]}\r\ncf-ray: 9994bb0688750b69-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6275,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T09:47:52.605533Z","times_seen":17560503,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":200,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/webfonts/fa-solid-900.woff2","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/assets/css/all.min.css\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149908\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149908,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 149908, version 771.256","md5":"44f8148f80e6c3d60fa6425b0cbb862a","sha1":"ec2f4e5f311462dce67b8f354e5bb9a68c12cf58","sha256":"e2c5cf547e2e8d74a17d05c5ad9f1f593ca526452e228124294fa983b908ff82","sha512":"07978f5827f0d5e9191b6970f0a01d10b88e33524c4aa3973d527ace295ee356f907c0374a430785eaabdd1ac06811c841b3da704066044f4d66fa4cc755ec8d","ssdeep":"3072:1q8xfiSXJLOvVpYQgUGUn9bymvMalSSb8S9glCb2XzMZm:A83ZLMVpYKrtPvQRSuzv","tlshash":"b9e312560a90854e7ad8c661360fef0fc28f33ea6ffff2a5e0c1fa8655dc94a2594450","first_seen":"2023-04-07T23:49:37Z","last_seen":"2026-07-27T09:40:14.449331Z","times_seen":3352,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/service/4.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/service/4.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1804\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b19ce2757e73b7b2447079c7d740ccb4","sha1":"1c08f820c379f7ea76a1965e0292acef48873c07","sha256":"5bb7162797d71382e542fc91d527b4eaf113d5b87ca1fa1bff84d167d73a8721","sha512":"c145e71e920e55c05af29cd1bc6ea834c97d993f1116dcf16ec6098fbcd032b0b402989b3799739839912cc78413781fefb0e0cf9d1f75c08942788d7094f3ef","ssdeep":"","tlshash":"41310bdb01e4f18c7b296241e9aa863503d778354017158ac4d90ceaa739c65fc2f7d2","first_seen":"2025-02-26T15:15:16.408571Z","last_seen":"2026-07-27T09:30:13.199266Z","times_seen":341,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/partner/light/1.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/partner/light/1.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2041\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 48, 8-bit/color RGBA, non-interlaced","md5":"7ed93d7114b38a649d2e64c2d5afc379","sha1":"739ba2fef719237b853713dafc1911f5d0ff1412","sha256":"6dc5b8a9958467f57667d85d09b098de533a0fab7cea033b857f4acd12a2f009","sha512":"be30a9a783a0d7aeadf7c461a43a630ede001e5849ddd88c0f7434cd278567328f25cf0fa7fc796b1c46328da8f072409f8d126d4c8542e2161ee8f503729c42","ssdeep":"","tlshash":"7a416e86d447f297cb64011841b85b612ff603fd213583c7303131e56b3b0ae68e59e3","first_seen":"2024-08-19T14:01:31.576563Z","last_seen":"2026-07-27T09:30:13.230161Z","times_seen":301,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/service/2.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/service/2.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 850\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":850,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5d09f0b6cdb1624bc76992a6b5281f0f","sha1":"3a95f079c3e6a7ebc2403114753c922b9762ce80","sha256":"3a83502d2ddfdb36e1e299f47e6803de2a0ab46a52089b23388582e544cd2be4","sha512":"dac4a9a7c9690e0bbb55b7e9ad3204121482bb867e2fb6064c490bbe057ae4dc062fe41cc22c4e08e279d35221e11366c35eccb8d3362c095c465c23207970f4","ssdeep":"","tlshash":"250196ef7b3884788aad8ef816cc5c1308ab44ff082d06cc10898108bb26e504d8add3","first_seen":"2025-02-26T15:15:16.412094Z","last_seen":"2026-07-27T09:30:13.219598Z","times_seen":344,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/feature/home3/3.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/feature/home3/3.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29584\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 243 x 168, 8-bit/color RGBA, non-interlaced","md5":"3a4bb2ce66a6ac3ea0b8be18153af498","sha1":"29092b484ac0b23ceae4cef1cbde0dca2008d0da","sha256":"527b2be249cecca7dcb319a280be01bfb2ba87b1d53ef2d80a0c1513818700a8","sha512":"62ca1c9c1d2e1a1a144d12196b1b8ed3e532faacbe478c9ce60bbe1899bca5ae060bff343177521b4e00b0bb142717acd87c21ea03b99e064e6aab4b024e456b","ssdeep":"768:LOkRaFKXgxweKmrt9mp3C1xiBOzXa1fxdhTQFhQcCw5:raRKqXm01xiBOzXa1tkFhCQ","tlshash":"d2d2f2a81cc9c4b5b3ee5012cb64356ad3b1414a1ef336295a73687e3789e8fe702172","first_seen":"2025-02-26T15:15:16.423848Z","last_seen":"2026-07-27T09:30:13.209904Z","times_seen":300,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/toastr.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2353\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12635,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"dbf1260fde6ac3c7d16e4368b2af093e","sha1":"310a3630720dc88eb192da726cdf9fdb540a0803","sha256":"baefedb200a67117ed40391d7502f2bb5edee9de5d775a9bfce518e3cc749bff","sha512":"e0dff23ecabca3071a3b99c4c7ceb95419fdfed7cc3ae73c34de4044468a1f225a7fcbfb8ca7fefc58ba5900f57dcfe77d9993782498668ea39dec227ec24830","ssdeep":"96:ROtzIADXVID/LMpDRAD7tTQufnX5NqgWtdQK69q8OOGOlMixHCh6AYwDjOot:RgTKMAVQuPpNqgoWjrpG9ACRYwDjOot","tlshash":"6d42a6452912a3618dfb73ac9a87900cfb76a323858956167d7c83d8af30614d2f2fdc","first_seen":"2023-10-18T19:09:36Z","last_seen":"2026-07-27T09:30:13.22911Z","times_seen":286,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/feature/home3/bg.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:41.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/feature/home3/bg.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 213346\r\ndate: Tue, 04 Nov 2025 14:16:41 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":213346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 756, 8-bit/color RGBA, non-interlaced","md5":"539d1f69fe9dd06cc247aad03b5ccc8f","sha1":"742b45af176687391522121dadb48bbd553e64a8","sha256":"760cf336831dc8bebe810ea2973efdf8d6ea23d1938b02f606a353f2dc136071","sha512":"15efa70a0bab3b0142fe83f9a2e2fc5345bb94256d89effc4e68263035b693a0962dc320d9e50ca8100211d6a2b187462ddcf9bcbcd0b870c90e119121018276","ssdeep":"3072:jgb2QqYFERQ+ChkZFAb7ukF2wmMGztd9kfRDbEyhwAMPS3qO5EeEcBprk2icT60q:m2Q7zgFAXgwmMGp4KSaGEczrk4Ge1Rwd","tlshash":"112412c549f0e6487d1f1674af9ebf3be323a92f44e60e69f271e9adc022c918659005","first_seen":"2024-08-19T18:45:28.791946Z","last_seen":"2026-07-27T09:30:13.150467Z","times_seen":298,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/780/small/bitcoin-cash-circle.png?1696501932","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/780/small/bitcoin-cash-circle.png?1696501932 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2563\r\nx-amz-id-2: 06mKIe0b6NgZ7Q2HXGgOatNu4c+3+y0G8bYulF2ryXPdcN+TZuiNh/pdiY2bgKTuf8VZbXVXktA=\r\nx-amz-request-id: T2D5NE27580Q52D7\r\nlast-modified: Wed, 29 May 2024 03:02:27 GMT\r\netag: \"f48f4b8618fb19603884e1b4b32dedf1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Sy6FEn6iuFQHqeRsrf0TJWrKMaWCurV7\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2631\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nab5z5LDlJuVxFvxxeEos4jXGzTWdxWr3nmpsLlEJhXzg%2FHNrGwx6c3nv%2Fgo%2FH68VK%2FCYPu%2BaZoYMVleYmwQEuUUUwGca2xSDM6e%2FSP9XG9NDenUNXOf\"}]}\r\ncf-ray: 9994bb0fcfd1569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"f48f4b8618fb19603884e1b4b32dedf1","sha1":"bda63a558823f15e04d57af0991fd74464422031","sha256":"9c740f20ebf44cdc9123014169e2a44135764c0de01aed7d98c5357af5c61c2e","sha512":"7ebf1c64c9b78039cdae46fdcbc5af4ddbb6c8b9454beb7cd98b61e9d2f0c466406d2487978ff163af44eae5302dc403cced01c034f5f8ec81555c2f6369adc7","ssdeep":"","tlshash":"0b511acaf162bad2d03a6e3e2fe866f0966adfd30373405884d5c47419942299b3e61c","first_seen":"2024-09-19T21:12:01.205857Z","last_seen":"2026-07-27T05:42:10.199877Z","times_seen":268,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/css/toastr.css","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/css/toastr.css HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2877\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7574,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (821)","md5":"5f96ac3efcdfacd9fe9c91fb26a09666","sha1":"5f8ffd4d3bd513cfc47b81ee2556ae12b55f5c52","sha256":"3dd76a7ac87c9d0546ddb55f4763bc03770780aa053a6223fac74698aefb52e4","sha512":"ff1a4ce555764e11a9e21c190aee71db4058714121e51ff44ad3525055202c7375d79fe2b19f26cbe7cf8cae18a27c2c1a62aada4249b89e2fb17f79d53493da","ssdeep":"96:qa7hh4QdQXqrB4KkKX66thIiobmQTWQ78GhJZCjtC8TWP+zLmlDDxTWKG8CzyoS7:N2qrBb66t5zY8sywttMGqVMv","tlshash":"bdf166259bd22608bdc5406db51926072b2aa003d6ddecb96ddfa16cefc7bd0dc71344","first_seen":"2023-07-23T13:47:16Z","last_seen":"2026-07-27T09:30:13.172687Z","times_seen":327,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/js/purecounter_vanilla.js","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/js/purecounter_vanilla.js HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Dec 2024 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2226\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5409,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5156)","md5":"a337c9af93cd71a7a9517921879be5ec","sha1":"077f79d84527d7c449112df06d047565553c6594","sha256":"6b68e5ade742f1c41e98d4a7052dcfa69de8a5961c32144adee15091099060ff","sha512":"33ba2d92270980d9fbf7cb99a2f18b3b1f1b9d3f11c37211c34590d9dfcdce87105d1807bef2930aff45b46dfe9ace5183d6fbfe4712c2a4de5ac5654b4c1241","ssdeep":"96:iRrPh640rGYBDCp3oPgonzvMkdJz7zxCrO6U006NEukUHCcx/puPsO5OworU:iRzMfFxCp4PgcMIxC46iPUiy/puPsO0S","tlshash":"5cb1b6897283f0b6c77750a600ef5207b678a561141ec550c16af8d43dbe6bbc313f6a","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-07-27T09:40:14.478463Z","times_seen":792,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/logo/logo.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/logo/logo.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Apr 2025 13:09:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6691\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 265 x 71, 8-bit/color RGBA, non-interlaced","md5":"5a71bdce5c22aed3ebee6c4b51ca9936","sha1":"238e59948e5861356c3e4b1513164217462d516b","sha256":"6c3e10a949db73f6d7883d7240363f20a2cf8cd338744819c42bf47842da447a","sha512":"f9e6879771d388cad5026f0804f69b1faf2ec86c6530bf9a802d799b6c0bd5f4074ebc8396172a81204645ece916d69208a3174b840a7831455916490398b81e","ssdeep":"96:yj4knmWIIlCJNfG5OJOJuHvNHEzFMPj3umBPyUO1YJ3U66oCfPlnyE3jvymbJVm9:jknAhPNCShBPxk6xKl/vrNLZQH","tlshash":"2ed15e40f980ce004f1452164aba9687093bfb4091826872edd9cb9eb8b0abecd5cdc4","first_seen":"2025-11-04T14:17:18.450313Z","last_seen":"2025-11-04T14:17:18.450313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/975/small/cardano.png?1696502090","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/975/small/cardano.png?1696502090 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 4750\r\nx-amz-id-2: 7nWglZtgehf0ugUxlit4QG4f2vQNUDfxdJy0FSUqN++9zf+shXC1QzsY6wDfRCJpyPFflMZ1SfM=\r\nx-amz-request-id: 52T9X585YVENDQBJ\r\nlast-modified: Wed, 29 May 2024 03:04:31 GMT\r\netag: \"1e0453d0e5670dd366eb0508bbd45b45\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: nuD4N67vMcVH11GHYzNkiPGnFFD4L2zJ\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 5084\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZmL7dBKTPeMQDXekmEpyEFnHZWp9gjShAZdTeVK6jkRJRmrZukXMMPynKQx8x8qs80g1%2FDQl0GCpqtc698hopOXT3vRFYarfbqKu4TMN3CIU4jVJbAQ\"}]}\r\ncf-ray: 9994bb0fbfc9569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"1e0453d0e5670dd366eb0508bbd45b45","sha1":"5fdb15ab0665376ff50a74e1be44fe8c71952623","sha256":"dc6e15bb2a5feaecc6571be846181ac567529b59f34d682a94cf1fab0f91663b","sha512":"52523edeb024510436a723aa396b9f79a7c5eb1ba189513006e05aed36981f0dda841d100cf3c9c885537745ddf6a3d025dc056a47c5a710ce82ae625e44a7bc","ssdeep":"96:x6ychmckCNJbiK2MOksUOMFiIhuc6VR5qO8uK0wtnFd97WHX/tBJUR4Ter:kvhQCsMeUOMnu3f5pQbq1zUR0I","tlshash":"8aa18fef5010d481dc6248b23e55e6a00ef587934212b4ddca1feb6aa4c9a2c6a42871","first_seen":"2024-11-06T16:01:50.598033Z","last_seen":"2026-07-11T19:12:32.160839Z","times_seen":256,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/banner/home3/2.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/banner/home3/2.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4821\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 52, 8-bit/color RGBA, non-interlaced","md5":"7b09dff2ceed5d683208d74074034ee7","sha1":"46773ea781fd69921e3aaa6d6b0959fbd5382635","sha256":"d7325bd546b48b4a9dd060c81b2348c7e1e4c561587e8c73d816ba7e06ac0948","sha512":"eecc0df2c891e998790f6b4ed92d50c2bcc8c870f52764a25e7519fdf25f133bb784d996945f7688203ccfcb7cd59c4b1877caabb87d5fe11bf211299403bb7f","ssdeep":"96:RSB2Cxjj7zgcjlmIVVzAgnueMcKSLA4CqeqH18kmyZCGKdMQw8bYh79y5EtEEcMD:RS4Cj7hjlmEzA9XcKSLA93qHOtyZCXK1","tlshash":"62a16c9be7a1f32c97e59f895285705366b9c3a802110029fc017f1e5bce61f4acc76a","first_seen":"2024-08-19T18:45:28.751815Z","last_seen":"2026-07-27T09:30:13.220092Z","times_seen":309,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/feature/home3/7.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/feature/home3/7.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3805\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"49dd698bac46f3f6f9a73329afd73c60","sha1":"cad973ea3e3325f8c7c47bd633c0f6ded59dd9a2","sha256":"b6b969af16d0c800b8567e8baee5a5c6a4ab7642fdc7b5734428fa16ede86c17","sha512":"9a137e00e516a4f1fbf134bf21354957d55cfc72b64d0de405ea3b0b85bbb2c8e9117616bdececb4a439f304032ad3a178623adbe7afd6a8574a2afa5c737224","ssdeep":"","tlshash":"42718dcd22c814a26f493bd87745e0ce61176a5cbf3b7c129a5a0d32b0219d53a2c780","first_seen":"2025-02-26T15:15:16.424914Z","last_seen":"2026-07-27T09:30:13.117194Z","times_seen":295,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/feature/home3/5.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/feature/home3/5.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6327\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"ecc8630cef654bb2b0581c11248027cf","sha1":"2284bcf5151ed7f14bacd9e891d6dab7ab2449fc","sha256":"c2ac331d839c1423573f6518e8e2c676a07cfbc7678f9dfd5957002fce76448a","sha512":"b8d259129bd8b0c1a067361178fd8418954f53f66ad918abfea27028c2be8553933be165d82a3d14e66c45cec694779507678150aa758b3c1f0e354c927fb42e","ssdeep":"192:bSEY+Mfl22Kof/gO5QJaATJRUeybcZR21UtR:OBJl22bfoyQJa6JRFrZR2OtR","tlshash":"8fd19ec2c809ad89c3aa8b9447bf0533b95cb4bc06c574a7e9d87808e164c50ea8e7e1","first_seen":"2024-08-19T18:45:28.761687Z","last_seen":"2026-07-27T09:30:13.210931Z","times_seen":306,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/33033/small/weETH.png?1701438396","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/33033/small/weETH.png?1701438396 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 5509\r\nx-amz-id-2: stN7FwBVX2mPUQl6GyJLi4eRMFGYiMjM7jf+DhzXp5DKQuSvSZ+tEnWC/HlOhojVG94QsZf6If2Aw5dKgeKbHwqyVhTvNJWNLu4b95eJrVg=\r\nx-amz-request-id: 0YAM340QXBYAXYN7\r\nlast-modified: Wed, 29 May 2024 02:53:13 GMT\r\netag: \"5c3b3b7573f1c0a74d9b6ee14c30101d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: i9M5XGcbDmA4B_iYn.rLvas6fBgUd2za\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3547\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=saaFPEePbrLZ1m5lNFIEU11BWko2XdvX%2FkRZs5RUjQArfQR0hRxelchRGsWPsTuuFevKzL3nyjHxJp2oav%2Btb77exZovoqlmXQiBNwa537mjy8VPTTVx\"}]}\r\ncf-ray: 9994bb0fdfe0569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"5c3b3b7573f1c0a74d9b6ee14c30101d","sha1":"09b81cc11a277290bb0bf853115f37c3416ef8e3","sha256":"87b75ecdb83e94cd0c67bd4856c4db69adbcd9223957b92a534b34eef5fc82e7","sha512":"12367e250717f05b0f1dc4afe822cb3c8fd641664199b2579b4a656b9b9f9aac22db5f22b0abaa07e1839e8b0273a662c99579db4e60a81a395c4798f62f76cd","ssdeep":"96:fQKj0UnwyQgpDea03cj39f4MoRDAwXStIAGq+WdvcQneZQHsOPuygoAfBqv:fQ+jQsDCU39gMotZXcIAvcQeZasOPRgE","tlshash":"36b1aff5d27a226140b8276e0a896b1b9146cf117b550150f3c5f9febc88fb521ea823","first_seen":"2025-03-05T22:50:33.641956Z","last_seen":"2026-06-13T18:18:40.277175Z","times_seen":206,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/35021/small/USDT.png?1707233575","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/35021/small/USDT.png?1707233575 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2272\r\nx-amz-id-2: U+OvLiu5POed41s98Auryjfl8EGiTpDKGQKAVFXC1xmh50WUWD6etIrUPYQ2VZ7+D/elx0WjS5U=\r\nx-amz-request-id: 2EACF6GGFB806JCZ\r\nlast-modified: Wed, 29 May 2024 02:55:11 GMT\r\netag: \"769c3939dd354adf68d8aa2113d8024b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 3xPyTT0YrFjQYxEnUB9uAyHQI0wuI8If\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2630\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiEzmgx7ws46UKKdi95UNVcQYzd3aTjqJD7NUl5BmC0lg%2FUH3HfWmwnmG1ibp9HwDCKPsxuLkAQmN29N46b9FObD5rv99oZdDPK%2FL2xwWT%2Bq54xB5tif\"}]}\r\ncf-ray: 9994bb0fefed569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"769c3939dd354adf68d8aa2113d8024b","sha1":"cb62d50819bbba75f37d0a20ff2f7add60c33a5a","sha256":"aedb08d93978a495247333a9f16fad5b382d0fc78d444b391fdd1cc44b1b33d2","sha512":"eb0e33ce15c95d630ca18fa6b3616a3ae02739e193d6e3565e0a7ff5588e97e85585fe864fa6a350be762137f89dcf29942bc3776e1faa5c7f0ac6ea37f73173","ssdeep":"","tlshash":"e441f8ca009106f1eb124db16d7e8586b8f409e9da2b5328e4a08cc9926de92b25b364","first_seen":"2025-10-15T03:49:24.073846Z","last_seen":"2026-07-27T09:54:10.918099Z","times_seen":188,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/icon/moon.svg","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/icon/moon.svg HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 18 Dec 2024 16:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 312\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11cfba1dcca7b3550cdc0e13def7bcf7","sha1":"11be046676483d5d5e44469dd2e8655862c0b67a","sha256":"9d08b89da870e467d9de2340a211792da2b1f6c768bba831d861bb1f5a90ca30","sha512":"f4df34184c873710bd39845a771bc6e58dbe1f9d20e2cb25a096277e300b133ff3056f904f5574486b528dd52833e13a5b6206adb854869378fc1d502355a9f7","ssdeep":"","tlshash":"bbf0c059c75080a85fd063d2bd6c9a34642a209b6c58054cc479d4a41062b5bb030eac","first_seen":"2024-08-19T14:01:31.572073Z","last_seen":"2026-07-27T09:40:14.41681Z","times_seen":354,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://apexexchangesecurity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:41:33 GMT\r\nexpires: Fri, 30 Oct 2026 09:41:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:15 GMT\r\ncontent-type: font/woff2\r\nage: 448509\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-07-27T09:15:35.791811Z","times_seen":47672,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptohopper.com/widgets/assets/public/fonts/massive-crypto.woff?v","fqdn":"static.cryptohopper.com","domain":"cryptohopper.com","tld":"com"},"ip":{"addr":"172.66.153.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohopper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 13:38:31 GMT","end":"Sat, 03 Jan 2026 14:38:21 GMT"},"fingerprint":{"sha1":"6B:56:35:9A:D8:BD:79:A5:E1:1B:CC:E1:5B:91:B3:FE:CD:44:0C:78","sha256":"DE:78:B0:AA:92:CF:50:13:B5:80:B5:42:17:8D:8B:D3:6B:57:6A:83:56:E3:77:6E:41:19:A1:01:AC:A4:14:20"}}},"request":{"raw":"GET /widgets/assets/public/fonts/massive-crypto.woff?v HTTP/1.1\r\nHost: static.cryptohopper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://static.cryptohopper.com/\r\nOrigin: https://apexexchangesecurity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/font-woff\r\ncontent-length: 2572\r\nlast-modified: Wed, 12 Aug 2020 10:33:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\netag: \"3bcd011f5d52c70360814408e5117ca9\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: DER8Czoy7170i3lOvOARK3XbnwJndL2W4bBTOtqZRy296vdBGN5USA==\r\naccess-control-expose-headers: *\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self'; script-src 'self'; frame-ancestors 'none';\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9994bb0fb9b1b51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2572,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 2572, version 1.0","md5":"3bcd011f5d52c70360814408e5117ca9","sha1":"ac1afed0a12a978a8ce7d00e070ce7d8ad9d553f","sha256":"e9e9cefc6b956ab037809a318e9560fc82432bb7e59e63d6c9559aef95b62187","sha512":"ee0312dd0bc6596dd977347dd23172fbb070aa2332ea2910f5498dac94304269b8746b694da95661712bdb25f6860c4a1dbfdf1f5576cb25c60e9856b73767dc","ssdeep":"","tlshash":"60514c86ac96d765e5ab257a7af6090a3c2d3034756763ef0b4c46313e0222412cc2b1","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-07-27T09:54:10.864283Z","times_seen":451,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/service/crypto_recovery_icon.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/service/crypto_recovery_icon.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Apr 2025 19:49:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2751\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 44, 8-bit/color RGB, non-interlaced","md5":"d2269725e61eba19c11a26aa015447c3","sha1":"01dded5b84c3c37b1be97f1ba070352cf7a0476a","sha256":"4d6c053ae0979f05f234c1920e02435383838ef543dfd9bac8d3d286be9847a9","sha512":"55c7550c9fe72f791dee2f6850169d5ff0af795fc34551338bef66a9113ecd72b21a8a9ef7f7cf32d2a2e2519f308dd263418aa313ec8f1834d1c6559aa42a67","ssdeep":"","tlshash":"95512bc9d6cb93421f7e38c2e07318b3d920a0d8496889bc1546eb4e8cd01a64a19eda","first_seen":"2025-11-04T14:17:18.461876Z","last_seen":"2025-11-04T14:17:18.461876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apexexchangesecurity.com/assets/images/bg/in-wave-mockup-5.png","fqdn":"apexexchangesecurity.com","domain":"apexexchangesecurity.com","tld":"com"},"ip":{"addr":"198.12.66.123","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:40.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apexexchangesecurity.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 12:37:57 GMT","end":"Thu, 08 Jan 2026 12:37:56 GMT"},"fingerprint":{"sha1":"C3:D5:28:E8:A5:79:B6:98:4D:97:59:E6:C7:13:2D:61:00:D6:C4:76","sha256":"7B:6A:45:4C:19:DF:84:E4:28:88:B4:8C:ED:B6:3F:59:3A:E7:44:3C:72:9E:25:74:45:81:D9:AF:7F:65:7B:BF"}}},"request":{"raw":"GET /assets/images/bg/in-wave-mockup-5.png HTTP/1.1\r\nHost: apexexchangesecurity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nCookie: PHPSESSID=e94b53d1d0a1c47e472c12d310f13487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 14:16:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Dec 2024 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47242\r\ndate: Tue, 04 Nov 2025 14:16:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 533 x 347, 8-bit colormap, non-interlaced","md5":"21d9c06974e9b282372227d9b0071825","sha1":"6f3f63c0cbf2bc7f7dc5df115e558cde9bb12ec9","sha256":"1e5ae7b1c65ab910b774511d89c006210623205169ffb101373402eb0e855b96","sha512":"5bdcbd5693b1ea740c9e7919a417f192d7a519adf1443de7fd27cc67b56452a63a5fb691e95bf602c43cbaa3e3d3711a21809113254d01f451750a4098b876fa","ssdeep":"768:htRmQ4xX/n5D7UA20TuMjYOZPInlgVf0gzrV0pN1T1/mhpNH3o4esbyW8zgDZbHs:hoBD7UsFjYaKgVsgzrVA1eh2sfWE64C","tlshash":"0223f2fb3a72d858b6f8e621d5fc5233d72cd418560e928664fc298407cac4770abd2d","first_seen":"2023-07-07T15:41:18Z","last_seen":"2026-07-27T09:53:32.662194Z","times_seen":339,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"apexexchangesecurity.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/33613/small/usde.png?1733810059","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/33613/small/usde.png?1733810059 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2541\r\nx-amz-id-2: 8TIk3cfLxEShsaVKmYNCvbbyfXoHb5lN5lJ+saCqZ1KDhJlNFncxI3lBzQmJk+9GJfnnetlAgGU=\r\nx-amz-request-id: 8QN2VJD64XY3Y7FQ\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 10 Dec 2024 05:54:21 GMT\r\netag: \"e2854f0249580b0c95f39efc24b99649\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VS8qLCDN.tCzKB9iN2xjfyejvWutSW4T\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 334\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzcEfUgBugxThxSVMaxBY6EsFKNOw6DW2zzAuPWpgnHOCCUZRv6NJoVa7XikEOnJgdEtDB7YmLwb0LX0McqlOsJnoHpWFlfX4IeDYcrZCxkyL%2FNisW4K\"}]}\r\ncf-ray: 9994bb0fefea569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit gray+alpha, non-interlaced","md5":"e2854f0249580b0c95f39efc24b99649","sha1":"d54e79258b031db123e24f742b929c3113e7c974","sha256":"ef9fc91aa5f0a99cb92736363798a1cbf7ef453b92ae8b06a45435ebfbbab086","sha512":"cbacd22a34c35b03ae1908b5ad96f17e41c704587f510990b1e36953ddf76d4cf9b4361a698a5e4c1eaf7e1f4302977239c57a4ab66783a185f1f457c284a35d","ssdeep":"","tlshash":"6d512dfbafed5c0476fef48b922000d08715724143b04691d6627da94691c2d5946aad","first_seen":"2025-03-05T22:50:33.651974Z","last_seen":"2026-06-13T18:18:40.378Z","times_seen":199,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/5/small/dogecoin.png?1696501409","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apexexchangesecurity.com/","date":"2025-11-04T14:16:42.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 12:20:42 GMT","end":"Fri, 16 Jan 2026 13:14:19 GMT"},"fingerprint":{"sha1":"A3:81:20:4B:37:02:92:4C:C1:E4:E5:35:BF:3D:01:4E:21:12:2C:B7","sha256":"65:66:B5:57:8C:13:8D:59:12:1A:D0:FD:2D:1F:93:1D:E6:06:EB:F4:06:3E:AB:97:D6:EA:6E:E5:03:E2:BB:09"}}},"request":{"raw":"GET /coins/images/5/small/dogecoin.png?1696501409 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apexexchangesecurity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 14:16:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 4857\r\nx-amz-id-2: oYJzcFDHEKvInlh8YghOcwKGOXbs5Mjl4GO+CNmjRWmm7ggpGNnlGpKvnDaOw4gGk4kF0g3EaIc=\r\nx-amz-request-id: 0NEZS2QKJZK4GNAR\r\nlast-modified: Wed, 29 May 2024 02:59:25 GMT\r\netag: \"3fe73d0936ccf1dc5467ec873cdaf72e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1WNBnx8e0ymV6tGvOV_u69HmOrZqn32u\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 6682\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FeWMTzuux0krK8YIg0rBnV4LHiYXRPHYlTR9S5VrnuAciI6hKcXz%2FxOOU%2ByqsAa3pUAzymKeuLnT5SngHy%2FyZDfBIU0dqCXK9TFxzrj2bVoYGYfUkuc\"}]}\r\ncf-ray: 9994bb0fbfc6569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"3fe73d0936ccf1dc5467ec873cdaf72e","sha1":"11e79b580ee74ddd41ecb9a652a31623afafbbbb","sha256":"68654f81c92bf7dddcbf66f34aea126c90efe810a31cd59d8bdc5c88d9eec8c8","sha512":"df496833435b1040372906ff757ad08abc82f2f252e234cd8a3e7a93698adf916623baf308b6bb825d9f6d194a5629655300a851d7c3527b509971ba394bc7eb","ssdeep":"96:vqb+VFjgqzURHG6yGlMFK8mocWe4WPNYUDjSyO5++dwtKVuW:DZE3IFK8cZPNYr5LuW","tlshash":"26a16ddff91ae741cdbe06801f2717db2974c6a341aab6e1846912ea28e5d7e1c32710","first_seen":"2024-09-19T19:38:42.345867Z","last_seen":"2026-07-11T19:12:32.29295Z","times_seen":280,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}