{"report_id":"110a416c-4a1f-4d91-a75d-76713bc24dbf","version":6,"status":"done","tags":[],"date":"2026-02-14T02:23:09Z","url":{"schema":"https","addr":"ff-excharge.biz/","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"ff-excharge.biz/en/","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"title":"FixedFloat | Instant cryptocurrency exchange","dom":{"size":606099,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (834)","md5":"5246cfd37a391521bc78ea1cdecf27bc","sha1":"86c4a3268aad4e297d308bb9ee76cb330a96d428","sha256":"797b0893a5ddbf761e9ab2b8aa322fc213eb0aef5d2a02281caf6e105f037c40","sha512":"04e5df08c07c2ca5c23f59ea6c9d3ebf19cffcd83e5b27af21c912de1aa7e33cbc4613595175ca69b658cd53bedd377c551c35587b74ede4458fdaf441e28b87","ssdeep":"6144:yzPMBbV5pmfmJvco+gme3vHgglg1QAQCRCE/GBEpu/H6I9+3ppgNFQoj0/QNxyvp:yzPMBOWTAA3uqyS5Q","tlshash":"e7d41164c0f3557b0473a0c789af673728e0924bda56471a77bc9ba62fcfe957423028","dom_hash":"domhash1c5fa4b47bd8140241ff171afdadf5e3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ff-excharge.biz/","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:23:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T02:22:47Z","timestamp":1771035767,"ip_dst":{"addr":"Client IP","port":48760,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 8","source":"{\"timestamp\":\"2026-02-14T02:22:47.030750+0000\",\"flow_id\":856166774544093,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"62.60.226.213\",\"src_port\":443,\"dest_ip\":\"172.18.0.21\",\"dest_port\":48760,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400007,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 8\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-02-14T02:22:47.005853+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ff-excharge.biz","ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-01-16","domain_rank":0,"first_seen":"2026-02-13T13:16:05.909294Z","last_seen":"2026-02-13T13:16:05.909294Z","alert_count":72,"request_count":36,"received_data":2700820,"sent_data":18720,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Matter.js","description":"Matter.js is a JavaScript 2D rigid body physics engine for the web.","website":"https://brm.io/matter-js","common_platform_enumeration":"","icon":"MatterJs.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":1,"received_data":87681,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.simpleswap.io","ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"domain_registered":"2018-04-10","domain_rank":1529096,"first_seen":"2022-03-15T18:27:07Z","last_seen":"2026-02-11T19:24:55.104023Z","alert_count":0,"request_count":2,"received_data":3830,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ff-excharge.biz/js/webln.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"38777db42f0df092ebb6769ab7511449","sha1":"7dcf72974aefb27df51ae5b8bf0f948b90196157","sha256":"f01c0bce43f97ba51e272f42edec45fc99680f926bf996120c125fd8e427d1a2","sha512":"d929084cf153d5cd2b0900f9a5608fa2ba7114de9c8d6e25928ac638e17f673b71bb8d5998f84484173db8d4ac912b8317b9e09025b77d7cf0ae14a9390ce22d","ssdeep":"","tlshash":"4e41c084b792f421d7a790b1500f140fb279ea2a709f8195f389d0e25c7901ac632fed","size":2118,"data":"","first_seen":"2023-03-08T13:33:49Z","last_seen":"2026-06-05T13:32:53.621036Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/order.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fd0380771eda20b4d2ba95b3667af4e","sha1":"ed03f2060ba98f1c6f726374cc2acdb791f86a8c","sha256":"a5e978c5745c86dbaf65655f70649afa37c97f5fa9b8f48f6c83b897b3e428bc","sha512":"1e31380407d16dd982032742b84b3a0ba7b2909ee9d8d7eab78efd41a2f23b70efba09b201a6e50679f00172562ab7da785babd6f7fcb7fe2b03c2af7ea001b3","ssdeep":"384:Yiovo4mzeYa4zqEPoiEnw+NmzREtGeGex/HPuXL79noowKL0lQAZ2H:lovojedEPoiEuREtGeGeuXLwtaq2H","tlshash":"a68295e934103abe6afb14749566d881673f3ad9810a4020ea70dd325d6cf40f626fbf","size":18917,"data":"","first_seen":"2025-01-06T09:18:53.367991Z","last_seen":"2026-06-05T13:32:53.598089Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/exchange.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c674c6df45a671d9a4873c5d405aedea","sha1":"73e127ee7375f46975956bd3d82686ff62a1eab8","sha256":"cdfde038a57a0a9333850a8b00e11dd6feaa11f7d2c95aa1c47d184391b9761b","sha512":"e314e3c81fe92946e1676f36cb1e44c651ba548190d0db3e66d50ac90e5c0480c3b98dfbd29508ed8ae2e932e1396eeefef575ec406e6c3d5508bfc5edeafab1","ssdeep":"768:g+BJP8N9S4ef7SV9cBOokEzpeNpdL4LXnGeu9y9aPirEF53wiqCc0AR:JP8fSpUIXn10AR","tlshash":"c3d2c74c7a14717303fb20f5a86b9905663512e4e90e40a0aa5ec8670bf8f75ce63e7f","size":31067,"data":"","first_seen":"2025-01-06T09:18:53.364193Z","last_seen":"2026-06-05T13:32:53.605805Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/moment.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a79a8710a3517e497846aca9179f8d81","sha1":"a84840cafc097fbcfaab6c49d5fcfaa598e0ec6d","sha256":"56b9ad34701d1b38cdb1436d5981b9e71c44f710d3cf8805eb7c7fa6b297287d","sha512":"fe44d67fe08889f05f416d1e963b0601b4c031d7103e41f43df4610729cddaed5e7a277de91eac929c8ae4e586bcb3f3ebf703aaaf1547bfdc6e26c515d5abc7","ssdeep":"6144:ACR1oAhVuh87GBFQ7/GY3TSZWkcSO2dpMONat0hpAWgwlei+nckWRMDBTmpPFpGc:WAhVuh87G87/H3TSZWkcSO2dpM2at0Ea","tlshash":"e064c6cf63aa5b9e0a546116cc3dad0c284d0f80d079d735ffba5187f61ca2842bab75","size":326657,"data":"","first_seen":"2023-03-07T13:19:06Z","last_seen":"2026-06-08T16:56:52.842751Z","times_seen":1086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"76e6e312543563bb8a8319fee210eaad","sha1":"b42fe2487ae6289f65f5ce031edd855d8c6e9796","sha256":"7b12566af2dcfffb81a3e4a6c58f8f286b7657402f006137516e8a25900cc320","sha512":"9bf9de82a2e01628b005081801993aa64f5395a49f3686e1951046b39aef612c311bb3a96f93a009e408ebc1abccd5de79c89685aabfec2f1facd1a24c2fbc10","ssdeep":"3072:Xu5OUooqJg0/weS676qnUxZuUY3Rrfqc6wsX+yXpX2CbutU/DHFSYGCOHM:Xu/oR76qnUxZuUYhrfqc6/Vbv7leLM","tlshash":"d4841959b250343506c650a9906f0a0af732392d685a849cb77ce4efacbcd8d317bf79","size":402334,"data":"","first_seen":"2025-05-29T08:11:15.797168Z","last_seen":"2026-06-05T13:32:53.609004Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-09T02:07:01.316994Z","times_seen":93244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/matter.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6a46d5e3a6549b506874d8f6e7accb6","sha1":"825549102d6ef1dff10f262cac1aa3762eb234e7","sha256":"066bdbe292568a7f2baaadc69f03f3fe1c41b6a5da31d6472671d89694542dae","sha512":"a62d2d49165d94d45978034fc1d0081d101883a819655e909408b21d79f94d8a8bcc1284f6396db4efd08182cc848483ea836fda43ec55e971fa7e67c3416a28","ssdeep":"1536:xV9/eQr/jLqPTFB1teLjIHk7gIO7VFk2CS+Ew1n8:XAQrXGheHokUIOpFkIZ","tlshash":"ce832b8873483929c393b3a62acf1149e27769505c06ac54930cd253effbda9117ffa9","size":88093,"data":"","first_seen":"2023-07-01T05:49:28Z","last_seen":"2026-06-07T11:02:20.313766Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/en/","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7a4256ed1a94f25d91f17740860696b","sha1":"7cbac085eaab60df7189b4434fc6ac235eef34b2","sha256":"265131500e5c653fff6f9e58cc3e6c9693ceb7fe17b1e8015388065ed4402f82","sha512":"aeab55fe100c7bf06704c5e90124afc4ca443f66ab61144052b1ffedf10a547df680328ee508a2db35312d196659213980cec60299006ff57f9b949fa681cccb","ssdeep":"3072:X5pmfmJvcJO+gmet9vKkgglg1QAQCRCE/GBEpu/H6I9+3acpgNFQoj0/QNxy6OIt:X5pmfmJvco+gme3vHgglg1QAQCRCE/Gr","tlshash":"e7b3458e14f95cae8d0331d39b42628252dc01cfa35e6c6b7aecdac52bd1bdb0179356","size":114333,"data":"","first_seen":"2026-02-14T02:23:13.065591Z","last_seen":"2026-02-14T02:23:13.065591Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/jsqr.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"09c78cc48b9ea69d217b2f083c49cdab","sha1":"3a9f3b012105be05d297c7c04072bb614aec1ffa","sha256":"febd002ce56bcb80f41fbc4604842914f354a75c88270e5d96c3eeb104d9dd14","sha512":"47637d22aa167207c428e961e56d8ab293ab1ade0639836a19fe486825a3f805827c2dc6c1febf86d8699a710b90840c898c538a14dfee1e494e8a191cc911cd","ssdeep":"1536:YZCvlZtLT+92a+PlndTkXuz/nU0g7o5EKDIecFcfiiS50cBBi8pLuo7+0C0yeST+:uCvyh","tlshash":"cfc3a8c261baa4d3e2d3ab4b8f323554a138ba72381f15686bd3e74d4dfe4c414a4f19","size":129409,"data":"","first_seen":"2023-03-08T13:33:49Z","last_seen":"2026-06-05T13:32:53.571401Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-300.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-300.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:34 GMT\r\nETag: \"3124-624ca1294cf80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12580\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12580, version 1.0","md5":"f95c32e0a411f4ca6aaac8a2b94fa34e","sha1":"5080c3364ddfb436f2717fba8da36226d03d8539","sha256":"11dd041d74737fc472cedef6bbadd0062120f17ea5e5195eb1490eaaa0475812","sha512":"8881de901781ab114d33abb73728e5600e35686cc3e943fc21ec2e3c3d210762319ef517f780db22d10da913ae7c790909ca4121f9152c7e7becf4e55e313850","ssdeep":"384:lfC3tKXF+jekDd5gCe6pznuBTyz2n+YuzKqB2PyRd:MuFqo76pTuhr+YuzKqDRd","tlshash":"6842c07681d28c5eb4554d33f2e742abf5dd04226e94a84a34e82d763dc0d9882fba1f","first_seen":"2023-04-08T17:29:10Z","last_seen":"2026-06-05T21:21:44.260714Z","times_seen":326,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-cyrillic-500.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-cyrillic-500.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ff-excharge.biz/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:52 GMT\r\nETag: \"4a14-624ca13a77800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 18964\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18964, version 1.0","md5":"ad8b8a67b000d3e1b31331197fc9294a","sha1":"76e83165b5792625fa27aaf8edb7c298ae4962ed","sha256":"d879ca1a423df2d63d43c1be42d776444cfafb99a3fe6c0efba1059b386713da","sha512":"c7f12ca1dbe7e253632ffddc9ea14e37bb16a888dbbbe3f9391326082fe863341ece7df390071db50cac9fc8146b7246fef2ded48bb6344e3876cd1eb56e65a1","ssdeep":"384:Ia7Lg2WRjxP470LvCqYwOhxm5bdxfysP84UN1k5pYcjHQOQOTd:Ia7Lg2ENw7079YHDQxfysPU6Gcj/Td","tlshash":"4482c055b6fa34bb8604533804690f3affa2e51f884560c3d53e8294592a77bf349da2","first_seen":"2023-04-10T00:01:23Z","last_seen":"2026-06-05T13:32:53.588013Z","times_seen":50,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":46,"dns":0,"connect":25,"send":0,"wait":25,"receive":26,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-cyrillic-600.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-cyrillic-600.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ff-excharge.biz/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:54 GMT\r\nETag: \"49b8-624ca13c5fc80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 18872\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18872,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18872, version 1.0","md5":"83732857ecbaae334284df51bfb9d1b3","sha1":"722c21adee400e2e02c8637fbae6a4f1ef861b87","sha256":"d02e6f1cfdacd9bc1d6e6ce2827df4de00a320a0ce9324385417ad813b5860c2","sha512":"4678cf7270b0c2404506e057fde706292cdc2542318dbf40506b368be914f2c351ab97b0e4213fd29f6d4df7678261783609d11f9ac1bf681349d7c0798fb0dc","ssdeep":"384:YcxBpyYiJc/R0uUlc/Z9HNrtJBdgg4zDLV1zpGxiHKyedIn5L:YcXwYiJ0R0usy9HNDwzDLV1LH7","tlshash":"8382d09f3b69e8a5e720dabd245a47fe0488b0063f10e764c7ad3c8b5d5469072fdc1a","first_seen":"2023-05-12T14:28:43Z","last_seen":"2026-06-05T16:12:49.429968Z","times_seen":118,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":49,"dns":0,"connect":25,"send":0,"wait":25,"receive":25,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/fficons.woff2?181948","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/fficons.woff2?181948 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ff-excharge.biz/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:56 GMT\r\nETag: \"7948-624ca13e48100\"\r\nAccept-Ranges: bytes\r\nContent-Length: 31048\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":31048,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31048, version 0.0","md5":"17aff176a9f806dfdd9a287ecefe94fc","sha1":"2caf5b575f7f2227457f559f1a0c4ec350493f78","sha256":"8db5f7a86ea6e1105eb1c9a82c225c108313e4ef66c2e936a1d276fbeda4c23c","sha512":"d3c0c1ff4fc219833bac13326a0f1f6a205e14f097f88beca5d09f572866b4017b30051c1ca9a4f5c4290795bfb9d4e0677e461c8b8d4e5cf825dbc6856732d8","ssdeep":"768:UtfSLrB/PhyeFli5Ric0UfK/sGJmfdij3fP2jBhU3:ifSh/Ri2P4Ub93","tlshash":"9cd2e1dc226d1574c4c7aff24c2c178ba4bc4bc4443f95a0298770d514f99ae68aafd7","first_seen":"2025-01-06T09:18:53.376808Z","last_seen":"2026-06-05T13:32:53.60432Z","times_seen":32,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/icons/apple-touch-icon-180x180.png","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /icons/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Length: 278\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a334a03d9a7be56db4388b267d242568","sha1":"b20a48d7170b4141fe5408805d2416efa912eb04","sha256":"ca165edd96f25217071f7b3b5416d68eaf04601236efc69141738ed632778156","sha512":"ff9a7d4d5e07b516890bc51e6d5b42d34c42309d5b4f3376747656c7894fab9382ed500d2fd91deed640aa30941c86acd8d80c2942f4edf0c002680595cb2cef","ssdeep":"","tlshash":"8ed02bdf504373874911156079c225c2278d22e6b47a82a82dc6e48b529853ecedeecc","first_seen":"2026-02-13T13:16:09.195317Z","last_seen":"2026-04-12T23:08:50.745437Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-cyrillic-300.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-cyrillic-300.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ff-excharge.biz/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:50 GMT\r\nETag: \"4908-624ca1388f380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 18696\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18696,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18696, version 1.0","md5":"2a5726aebd27877973444031470f0748","sha1":"4c79da20cc396d2460e7b77e1ac4f9cfc90d153c","sha256":"5eefbc15962622994dc4a6f370d18d209f058672a8b274df01a80096ecd55d1f","sha512":"9d9c20f335e87f41fd2067d8c242fc7d6b208cb5308e201eace78a07b1360f5f23df096bddef20a706d7d3152c2ac547915ec28cc61e73a7a9b013c0cb66ca75","ssdeep":"384:NnpbRE89mQ6uhzSX0FSkxOWKLdHX9DbJjcdPZf5TpHTYlLdh5Jn:NnpbRE8qouXQOWKLVxb+LOZdRn","tlshash":"6382e000cb3e639342e4eabc214bddc79aeea467d6e2a7ec00441f5c1833b9e191a711","first_seen":"2023-06-27T11:10:33Z","last_seen":"2026-06-05T13:32:53.595063Z","times_seen":33,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-cyrillic-regular.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-cyrillic-regular.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ff-excharge.biz/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:52 GMT\r\nETag: \"4978-624ca13a77800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 18808\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18808,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18808, version 1.0","md5":"a3aace862b5a55ce05f2cb5c6f80f7a0","sha1":"d3d04ad9a5ef59c51a23c942b39be992bf041015","sha256":"c36e28ab1ed3b19e390cdb35229be0a6ae1a2ceac3097f8f00d324ab97e3be11","sha512":"03712292b203f59398f5ac7eca1960d71c0c866f004972d33bf1bdf17d606dfbdfec2aa6aea767feb4ad63d3cb2e2cded3456efb362d66537cf6b73ee8da843c","ssdeep":"384:Qr8/VePM/OwSam5OfkG8Sm4O6c4Y8c5q9FTrZLTdM4b1Q/wjxyO5za:QreV0slSam5OTC4OeY8TLPvP1Q/oxyOo","tlshash":"df82d0aaae7590d0e34ff9ff3758538d8e319db921a6836b10a958bdd310b700707279","first_seen":"2023-05-12T14:28:43Z","last_seen":"2026-06-05T13:32:53.557951Z","times_seen":70,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/exchange.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /js/exchange.min.js HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Thu, 05 Dec 2024 14:29:18 GMT\r\nETag: \"795b-62886b9312b80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 8301\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":31067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31058)","md5":"c674c6df45a671d9a4873c5d405aedea","sha1":"73e127ee7375f46975956bd3d82686ff62a1eab8","sha256":"cdfde038a57a0a9333850a8b00e11dd6feaa11f7d2c95aa1c47d184391b9761b","sha512":"e314e3c81fe92946e1676f36cb1e44c651ba548190d0db3e66d50ac90e5c0480c3b98dfbd29508ed8ae2e932e1396eeefef575ec406e6c3d5508bfc5edeafab1","ssdeep":"768:g+BJP8N9S4ef7SV9cBOokEzpeNpdL4LXnGeu9y9aPirEF53wiqCc0AR:JP8fSpUIXn10AR","tlshash":"c3d2c74c7a14717303fb20f5a86b9905663512e4e90e40a0aa5ec8670bf8f75ce63e7f","first_seen":"2025-01-06T09:18:53.364193Z","last_seen":"2026-06-05T13:32:53.605805Z","times_seen":32,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/webln.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /js/webln.min.js HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 13:06:58 GMT\r\nETag: \"846-624d418342080-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 789\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2117)","md5":"38777db42f0df092ebb6769ab7511449","sha1":"7dcf72974aefb27df51ae5b8bf0f948b90196157","sha256":"f01c0bce43f97ba51e272f42edec45fc99680f926bf996120c125fd8e427d1a2","sha512":"d929084cf153d5cd2b0900f9a5608fa2ba7114de9c8d6e25928ac638e17f673b71bb8d5998f84484173db8d4ac912b8317b9e09025b77d7cf0ae14a9390ce22d","ssdeep":"","tlshash":"4e41c084b792f421d7a790b1500f140fb279ea2a709f8195f389d0e25c7901ac632fed","first_seen":"2023-03-08T13:33:49Z","last_seen":"2026-06-05T13:32:53.621036Z","times_seen":79,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/order.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /js/order.min.js HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 16:50:08 GMT\r\nETag: \"49e5-624d7364f5000-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4539\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18917,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18916)","md5":"1fd0380771eda20b4d2ba95b3667af4e","sha1":"ed03f2060ba98f1c6f726374cc2acdb791f86a8c","sha256":"a5e978c5745c86dbaf65655f70649afa37c97f5fa9b8f48f6c83b897b3e428bc","sha512":"1e31380407d16dd982032742b84b3a0ba7b2909ee9d8d7eab78efd41a2f23b70efba09b201a6e50679f00172562ab7da785babd6f7fcb7fe2b03c2af7ea001b3","ssdeep":"384:Yiovo4mzeYa4zqEPoiEnw+NmzREtGeGex/HPuXL79noowKL0lQAZ2H:lovojedEPoiEuREtGeGeuXLwtaq2H","tlshash":"a68295e934103abe6afb14749566d881673f3ad9810a4020ea70dd325d6cf40f626fbf","first_seen":"2025-01-06T09:18:53.367991Z","last_seen":"2026-06-05T13:32:53.598089Z","times_seen":32,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/images/fill.svg","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /images/fill.svg HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 16:11:06 GMT\r\nETag: \"6a-624d6aab73a80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 106\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":106,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb656a2fcbde8766b340065de8008428","sha1":"45e51b676ccb901589e84448d58c22fe0e5f16b1","sha256":"5e78fdbcadf0ba918f0d412d3f3757efd23d11d0a296f226a4bf5144a4f7d96e","sha512":"bab0458d80724b74684c841dbc376d93642bceb3ed98e6e90d73383413fd51ff44052b14898661679ceed4a62345160277181d57b565a25ef640394b4c056e89","ssdeep":"","tlshash":"2eb012be914d5d08c408c83060bc7497146a91c695c804bdc9d02500f04d9d3381123d","first_seen":"2023-12-30T16:06:41Z","last_seen":"2026-06-05T13:32:53.561642Z","times_seen":67,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":615,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/css/order.min.css?181954","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /css/order.min.css?181954 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 16:47:04 GMT\r\nETag: \"184df-624d72b57b200-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 24757\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":99551,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"50e64e2bc1df840841889fa0b3ea4c7e","sha1":"7f1839524a9347ed56ba4212ac5b38555f94bb81","sha256":"b21c0d0862d5901385947e7163bf5efccda1281ac2304d07c0300f43ebf6124a","sha512":"d1e88025f6535ef486c5dfbab9fe41fb76b8097ef855287d40b1e27625ecef3d70e0140ec344077f38b4608f3640780110eeed17c350c39803688479b15b1e31","ssdeep":"3072:3CJSc7/S2vQ2e63n3fnCM/8byUc2Av2sB++cDmuDUFZX:3CJSc7/S2vQ2e63n3fnCM/8byUc2Av2I","tlshash":"64a31960b7923029e45ae633dd484c9c202bd86edd9a1390ec2a1735df8766b1c76bf4","first_seen":"2025-01-06T09:18:53.366324Z","last_seen":"2026-06-05T13:32:53.589566Z","times_seen":32,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/images/main_bg_ground.svg","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /images/main_bg_ground.svg HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 26 Nov 2024 01:41:58 GMT\r\nETag: \"2493f-627c6f46c2580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 149823\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":149823,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35e91f075bee749b6997ff0d876712d9","sha1":"5f6eb672e1bcb583e97e35367d4be1f6527f3af5","sha256":"3d08e519d5801475fb278f3415c0ed707dd4c58d88f1e15f2271d6d00f7f9616","sha512":"203167afa79205883bc8333ce779a4445123f129a831fcf63f4c3ca88808d31af053f556671bf0ba85a1bafc57c34a08d5705be5e24fc73fc95e220169326564","ssdeep":"768:qE0hvGobTr3Y3BVHTAS0hqmQ+bvUis+EuX3ChCEC4zBjqJCVIOAv9EeF/DQQME5v:GbdbqG7psLHtemIO09lFrQQMOWa3Ie","tlshash":"d6e376b5e67d7837e61983bcff91d4a6300e60eec581836de06e673a1029ac35d0db64","first_seen":"2025-01-06T09:18:53.383987Z","last_seen":"2026-06-05T13:32:53.611152Z","times_seen":65,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":615,"dns":0,"connect":0,"send":0,"wait":26,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:22:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27277\r\ncf-ray: 9cd91989bcb44e4c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-15283\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 153535\r\nexpires: Thu, 04 Feb 2027 02:22:47 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wL%2B0T%2BsbXaykvncxpu%2F6mF3Y%2F0y52I3Sba8S7pptqTheQSUIXrVzmeTgamKkCz3OxY6LqSH8ZID3LNqU3DUcCmwXAEvm1PTiXB6BgqDH%2FRrZn2HJBTzKOfcBIOPXz7PmLMEskaU8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86659,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-09T02:07:01.316994Z","times_seen":93244,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":11,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-600.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-600.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:48 GMT\r\nETag: \"319c-624ca136a6f00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12700\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12700,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12700, version 1.0","md5":"e571167fbcce8d5081bce96a09930063","sha1":"e12420f5e4da3ccdc75a58ce744e7d5a0c6cf79e","sha256":"98be19bc78b5bc5d419e4fa6ea055ebd4671a963e2cc644aeed4362f15d14c31","sha512":"2a7e28d5e1cc8fcb4089f51a012ba801038c1e115102f68405c730f58b490f3c9fc352ba533e0bf062f965b5fb44239b1b8ba914863a72c68aeeb27101c31881","ssdeep":"192:9pyDYbbMYHexdHevLbDfo1HGQDo2hcNmchLzc83f55bA0hMMApntRt+BbzpsTOkg:9pWYHexWbDu5KcqjbMFovQTg","tlshash":"7342c07c8215e177b483a56c689724cc0881c73b7f80e059f71ac48a4f1798abc397f9","first_seen":"2023-04-11T17:49:47Z","last_seen":"2026-06-08T18:59:56.648487Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/api?id=1\u0026tickerFrom=btc\u0026networkFrom=btc\u0026tickerTo=ETH\u0026networkTo=ETH\u0026is_fix=false\u0026amount=0.1","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /api?id=1\u0026tickerFrom=btc\u0026networkFrom=btc\u0026tickerTo=ETH\u0026networkTo=ETH\u0026is_fix=false\u0026amount=0.1 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ff-excharge.biz/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 110\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":110,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"deec42ec57775681b82f86af39ca5ac6","sha1":"da743429de0447128b6c93422a8b97bfe496cafa","sha256":"4e187c91182354bd0abab1d7356e364631b9432fee36489289ff63c0f4176892","sha512":"c4ee7c21d3a5b812abc984f8bbaa08a30636df20b853266a016ba155dd67487516be6a147644187aae284aca89cc8a345a53580f9b78d74d142d426384332769","ssdeep":"","tlshash":"e0b01284859c4e0394403c29bd1e7c40084c382f874a8f79014e5f1000f90b6f2dc132","first_seen":"2026-02-14T02:23:13.047427Z","last_seen":"2026-02-14T02:23:13.047427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /js/min.js HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 10 Feb 2025 15:18:44 GMT\r\nETag: \"6239e-62dcb3958dd00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":402334,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"76e6e312543563bb8a8319fee210eaad","sha1":"b42fe2487ae6289f65f5ce031edd855d8c6e9796","sha256":"7b12566af2dcfffb81a3e4a6c58f8f286b7657402f006137516e8a25900cc320","sha512":"9bf9de82a2e01628b005081801993aa64f5395a49f3686e1951046b39aef612c311bb3a96f93a009e408ebc1abccd5de79c89685aabfec2f1facd1a24c2fbc10","ssdeep":"3072:Xu5OUooqJg0/weS676qnUxZuUY3Rrfqc6wsX+yXpX2CbutU/DHFSYGCOHM:Xu/oR76qnUxZuUYhrfqc6/Vbv7leLM","tlshash":"d4841959b250343506c650a9906f0a0af732392d685a849cb77ce4efacbcd8d317bf79","first_seen":"2025-05-29T08:11:15.797168Z","last_seen":"2026-06-05T13:32:53.609004Z","times_seen":31,"resource_available":true,"data":null}},"time_used":851,"timings":{"blocked":202,"dns":1,"connect":106,"send":0,"wait":112,"receive":314,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/matter.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /js/matter.min.js HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 13:06:18 GMT\r\nETag: \"1581d-624d415d1c680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 26021\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":88093,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1000)","md5":"b6a46d5e3a6549b506874d8f6e7accb6","sha1":"825549102d6ef1dff10f262cac1aa3762eb234e7","sha256":"066bdbe292568a7f2baaadc69f03f3fe1c41b6a5da31d6472671d89694542dae","sha512":"a62d2d49165d94d45978034fc1d0081d101883a819655e909408b21d79f94d8a8bcc1284f6396db4efd08182cc848483ea836fda43ec55e971fa7e67c3416a28","ssdeep":"1536:xV9/eQr/jLqPTFB1teLjIHk7gIO7VFk2CS+Ew1n8:XAQrXGheHokUIOpFkIZ","tlshash":"ce832b8873483929c393b3a62acf1149e27769505c06ac54930cd253effbda9117ffa9","first_seen":"2023-07-01T05:49:28Z","last_seen":"2026-06-07T11:02:20.313766Z","times_seen":116,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":200,"dns":1,"connect":105,"send":0,"wait":106,"receive":105,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/images/favicon.png","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:13:30 GMT\r\nETag: \"2eb-624ca20a5e280\"\r\nAccept-Ranges: bytes\r\nContent-Length: 747\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e04264839e2a7836e814e6c062962428","sha1":"9feeca92c4742df273c7b2a11d7212a4ce15c42c","sha256":"1ceb2c4b0b9527353d957d9c69dce84ebd51dc4ab546a1bf42868b3cb6825a43","sha512":"077db7210a2b9ae61135eb0b0be8ea879df975bddac0c386c854607feb2757c3ad37ea8557bb0af8ca5b0f11982bcbb7f72d710ea58d41a0044de1c444c4a32a","ssdeep":"","tlshash":"b401b5f533237ef224b27e47407e0499c28248a2c12dc360208bc15c069f3b8afd6b8b","first_seen":"2023-07-01T05:49:28Z","last_seen":"2026-06-05T13:32:53.565724Z","times_seen":76,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-regular.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-regular.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:42 GMT\r\nETag: \"31a4-624ca130ee180\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12708\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12708, version 1.0","md5":"b4a68b1e743ee317eaaf0bbadd131571","sha1":"f24f7823d4e3830c7cfa5bcb33733d2897c00f13","sha256":"ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394","sha512":"b3bf2523c9cf0ed55365ff6f03375512d478239297a2af99b839f15d59e49094b03e085fca8918faa75b928fe1531376070018ea5fdb07c3e8743e6253a14ed7","ssdeep":"384:uvrIB27G1PF5LfsdGAu0lKtDvJL8REbg/qif0:sY27a8xovJg2SfM","tlshash":"dc42d0753492f402b159fef554ae6fb0f802d1da7b81bf574116d1a0461c8c789bee0e","first_seen":"2023-04-05T14:23:20Z","last_seen":"2026-06-08T20:09:52.923232Z","times_seen":7637,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-500.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-500.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:46 GMT\r\nETag: \"3214-624ca134bea80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12820\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12820, version 1.0","md5":"3f2f6d9e64a95a40ea5dedfc91f42a95","sha1":"9cd9f5a2f86f1d42390141d91619a0aa41a276b7","sha256":"ed121b1a8fbf30998a4ed0a7c8343abe9091ac4744f1c24b602b5d3f962bdb78","sha512":"faab3a6aa8d6b54ea32ce7dcae453d94121df43e1eaa3c8d779c579733bc021dc63aac8c6a6df6b8a00bc3622c2d960dc41bebc33500671f1b298d1c83ed3c08","ssdeep":"192:p50Kdp7/epn/5KwXolKf55TIbqhWYDsWOaWon/8w/IaGDQe2uxz8FbwV0ltzQkxZ:p50U0hXoEvI++AznkJQvuxQQutzH","tlshash":"2742d086f0703d1ac12d55d8b6b148d42bc73eea56ea0d248854e8cf39d60c4790cbbf","first_seen":"2023-04-11T17:49:47Z","last_seen":"2026-06-08T18:57:46.523138Z","times_seen":843,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:22:46.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nSet-Cookie: PHPSESSID=r946tc43eca66940688it602mg; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: /en/\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":291387,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-09T03:17:28.028748Z","times_seen":16257673,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":101,"dns":46,"connect":25,"send":0,"wait":27,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/eth.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/eth.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: QRATOR\r\ndate: Sat, 14 Feb 2026 02:22:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"56e39587f3ca76d82e43408540176df2\"\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1893FBA5DB0D5C04\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\ncontent-security-policy: block-all-mixed-content\r\nlast-modified: Tue, 25 Apr 2023 13:43:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":542,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56e39587f3ca76d82e43408540176df2","sha1":"86896a7bd8520c681eee2b84ff9972ade7f5624b","sha256":"26063bc78d3624a928392f71d79cfbdb2d93697b66f202e23493c04e89a15f19","sha512":"df7e0310cec0afa8184a0e33f10bea5f9e1988a64ae33985e0a4c286ae00bc618451dd62fb1cde790c081f4bdee82d1c07ebe93bcd6937c0a5f489457846b5de","ssdeep":"","tlshash":"52f0f6e3b49821958c41cb028b1eb4aa1cf661ec4e7865c9a520261a6cc45ab5c9dfcc","first_seen":"2025-04-19T14:20:07.003452Z","last_seen":"2026-06-05T13:32:53.550865Z","times_seen":106,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":124,"dns":4,"connect":22,"send":0,"wait":54,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-700.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-700.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:50 GMT\r\nETag: \"3230-624ca1388f380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12848\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12848,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12848, version 1.0","md5":"f0b3206d02a2f684530117ce1d7e8ce0","sha1":"f3708b707b65e241b0f1c819d5f7bf7da8412653","sha256":"f31b80562610135edd91a86ec7f243c5eeaec2ec08337e6a20c2d135d8e217da","sha512":"319019c97a520d9d0fac5487d614c41b7c766bde2a60724966054b232427490817ff46e9f6ac82165343d50732c02e7f4821f4074908fe58775e3cefe6812026","ssdeep":"384:7s2w3jKnPxyyqn2JKL8i3pAGQF7Zximd9qjAECMfd2J:I2wjGQ9n2s8i5TiZbdYtCcd2","tlshash":"6342b0fd32582df09d56a7bff79794d75774915d888038d56dd0894c0bac278021cf4a","first_seen":"2023-04-08T01:23:46Z","last_seen":"2026-06-08T20:09:52.952158Z","times_seen":4936,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/css/min.css?181954","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /css/min.css?181954 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Mon, 28 Apr 2025 20:33:44 GMT\r\nETag: \"8dd43-633dc99a7da00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":580931,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (47223), with CRLF line terminators","md5":"9b933873ae619b31b9647fc40d020c04","sha1":"ca5b3897afa1d8472cf7d9c3369ff9d0936aede5","sha256":"24a658ca021006d26d3e06148d53767708de48d53bbb2be674e5382aacbd3aa2","sha512":"dd34fe33b194d7ac016a60291e59e7cbd8e4cb2079201bacd7d5550ae39743634e8c469d3d72dcb37693b94fe23fc0c3705b02f440d2356e7cd12bf500c8de92","ssdeep":"12288:Ugc0dtCJSc7/S2vQ2e63n3fnCM/8byUc2Av2sB++cDmfpCJSc7/S2vQ2e63n3fn+:RBdtCJSc7/S2vQ2e63n3fnCM/8byUc2C","tlshash":"b6c40924b702632a86bbdbfbdf915514e14980ab9c234148bbdc93048ff2974d4a5fed","first_seen":"2025-05-29T08:11:15.777456Z","last_seen":"2026-06-05T13:32:53.560785Z","times_seen":31,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":33,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/jsqr.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /js/jsqr.js HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 13:06:46 GMT\r\nETag: \"1f981-624d4177d0580-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 46411\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":129409,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"09c78cc48b9ea69d217b2f083c49cdab","sha1":"3a9f3b012105be05d297c7c04072bb614aec1ffa","sha256":"febd002ce56bcb80f41fbc4604842914f354a75c88270e5d96c3eeb104d9dd14","sha512":"47637d22aa167207c428e961e56d8ab293ab1ade0639836a19fe486825a3f805827c2dc6c1febf86d8699a710b90840c898c538a14dfee1e494e8a191cc911cd","ssdeep":"1536:YZCvlZtLT+92a+PlndTkXuz/nU0g7o5EKDIecFcfiiS50cBBi8pLuo7+0C0yeST+:uCvyh","tlshash":"cfc3a8c261baa4d3e2d3ab4b8f323554a138ba72381f15686bd3e74d4dfe4c414a4f19","first_seen":"2023-03-08T13:33:49Z","last_seen":"2026-06-05T13:32:53.571401Z","times_seen":79,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":32,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-500.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-500.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:46 GMT\r\nETag: \"3214-624ca134bea80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12820\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12820, version 1.0","md5":"3f2f6d9e64a95a40ea5dedfc91f42a95","sha1":"9cd9f5a2f86f1d42390141d91619a0aa41a276b7","sha256":"ed121b1a8fbf30998a4ed0a7c8343abe9091ac4744f1c24b602b5d3f962bdb78","sha512":"faab3a6aa8d6b54ea32ce7dcae453d94121df43e1eaa3c8d779c579733bc021dc63aac8c6a6df6b8a00bc3622c2d960dc41bebc33500671f1b298d1c83ed3c08","ssdeep":"192:p50Kdp7/epn/5KwXolKf55TIbqhWYDsWOaWon/8w/IaGDQe2uxz8FbwV0ltzQkxZ:p50U0hXoEvI++AznkJQvuxQQutzH","tlshash":"2742d086f0703d1ac12d55d8b6b148d42bc73eea56ea0d248854e8cf39d60c4790cbbf","first_seen":"2023-04-11T17:49:47Z","last_seen":"2026-06-08T18:57:46.523138Z","times_seen":843,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-300.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-300.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:34 GMT\r\nETag: \"3124-624ca1294cf80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12580\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12580, version 1.0","md5":"f95c32e0a411f4ca6aaac8a2b94fa34e","sha1":"5080c3364ddfb436f2717fba8da36226d03d8539","sha256":"11dd041d74737fc472cedef6bbadd0062120f17ea5e5195eb1490eaaa0475812","sha512":"8881de901781ab114d33abb73728e5600e35686cc3e943fc21ec2e3c3d210762319ef517f780db22d10da913ae7c790909ca4121f9152c7e7becf4e55e313850","ssdeep":"384:lfC3tKXF+jekDd5gCe6pznuBTyz2n+YuzKqB2PyRd:MuFqo76pTuhr+YuzKqDRd","tlshash":"6842c07681d28c5eb4554d33f2e742abf5dd04226e94a84a34e82d763dc0d9882fba1f","first_seen":"2023-04-08T17:29:10Z","last_seen":"2026-06-05T21:21:44.260714Z","times_seen":326,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-700.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-700.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:50 GMT\r\nETag: \"3230-624ca1388f380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12848\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12848,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12848, version 1.0","md5":"f0b3206d02a2f684530117ce1d7e8ce0","sha1":"f3708b707b65e241b0f1c819d5f7bf7da8412653","sha256":"f31b80562610135edd91a86ec7f243c5eeaec2ec08337e6a20c2d135d8e217da","sha512":"319019c97a520d9d0fac5487d614c41b7c766bde2a60724966054b232427490817ff46e9f6ac82165343d50732c02e7f4821f4074908fe58775e3cefe6812026","ssdeep":"384:7s2w3jKnPxyyqn2JKL8i3pAGQF7Zximd9qjAECMfd2J:I2wjGQ9n2s8i5TiZbdYtCcd2","tlshash":"6342b0fd32582df09d56a7bff79794d75774915d888038d56dd0894c0bac278021cf4a","first_seen":"2023-04-08T01:23:46Z","last_seen":"2026-06-08T20:09:52.952158Z","times_seen":4936,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-cyrillic-600.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-cyrillic-600.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:54 GMT\r\nETag: \"49b8-624ca13c5fc80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 18872\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18872,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18872, version 1.0","md5":"83732857ecbaae334284df51bfb9d1b3","sha1":"722c21adee400e2e02c8637fbae6a4f1ef861b87","sha256":"d02e6f1cfdacd9bc1d6e6ce2827df4de00a320a0ce9324385417ad813b5860c2","sha512":"4678cf7270b0c2404506e057fde706292cdc2542318dbf40506b368be914f2c351ab97b0e4213fd29f6d4df7678261783609d11f9ac1bf681349d7c0798fb0dc","ssdeep":"384:YcxBpyYiJc/R0uUlc/Z9HNrtJBdgg4zDLV1zpGxiHKyedIn5L:YcXwYiJ0R0usy9HNDwzDLV1LH7","tlshash":"8382d09f3b69e8a5e720dabd245a47fe0488b0063f10e764c7ad3c8b5d5469072fdc1a","first_seen":"2023-05-12T14:28:43Z","last_seen":"2026-06-05T16:12:49.429968Z","times_seen":118,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/en/","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:22:47.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Matter.js","description":"Matter.js is a JavaScript 2D rigid body physics engine for the web.","website":"https://brm.io/matter-js","common_platform_enumeration":"","icon":"MatterJs.svg","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":291387,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (834), with CRLF line terminators","md5":"79c28f8da0e035643aeebd99b05715ef","sha1":"3fc1ef621b0e83f442f53ecb528e2f73ea06acd0","sha256":"1d66dd64fb2bbae4fb82b0011994343317c8e91f6ea518b0024235e7c2dacbdb","sha512":"b50e226d432868ba17eaa759ecf0a4eeccdfac561e4f88ef7f1fcf2588038b4036ac52c57711f4e951ea4f6ee132a0b2a93ad0ff93190d03f9fb1a22657510a6","ssdeep":"6144:BsW7z5pmfmJvco+gme3vHgglg1QAQCRCE/GBEpu/H6I9+3ppgNFQoj0/QNxyvIAM:BsWMWTAA3uqySlD","tlshash":"3154f89921f5687f8c2372c7df015185e5dc819fdb8a045a76eccb862be2fda042b364","first_seen":"2026-02-14T02:23:13.058228Z","last_seen":"2026-02-14T02:23:13.058228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/js/moment.min.js","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /js/moment.min.js HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 13:06:36 GMT\r\nETag: \"4fc01-624d416e46f00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":326657,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a79a8710a3517e497846aca9179f8d81","sha1":"a84840cafc097fbcfaab6c49d5fcfaa598e0ec6d","sha256":"56b9ad34701d1b38cdb1436d5981b9e71c44f710d3cf8805eb7c7fa6b297287d","sha512":"fe44d67fe08889f05f416d1e963b0601b4c031d7103e41f43df4610729cddaed5e7a277de91eac929c8ae4e586bcb3f3ebf703aaaf1547bfdc6e26c515d5abc7","ssdeep":"6144:ACR1oAhVuh87GBFQ7/GY3TSZWkcSO2dpMONat0hpAWgwlei+nckWRMDBTmpPFpGc:WAhVuh87G87/H3TSZWkcSO2dpM2at0Ea","tlshash":"e064c6cf63aa5b9e0a546116cc3dad0c284d0f80d079d735ffba5187f61ca2842bab75","first_seen":"2023-03-07T13:19:06Z","last_seen":"2026-06-08T16:56:52.842751Z","times_seen":1086,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":32,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/en/assets/images/background/recent.svg","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /en/assets/images/background/recent.svg HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ff-excharge.biz/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 178\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":178,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"863a7426b22d0e547f6767f4db045c56","sha1":"75afb7b80266239a061ac1483d845bc6fde52517","sha256":"502ce2a08e62da012a10bde005dbf5a0fd2f8df8c0861731d972b587b22ee5fd","sha512":"cc5a5fe423513308b5fe5bcd3510e09f5924cb929a184a59e97fca80e9038e1dbdb1d0e3fd49aeda7a4d4fd877b37e95e0351146753ae3b613f289789d7de48f","ssdeep":"","tlshash":"38c0224e8086320ec11035a02ac131a4be4e037674a149212d446809a00406c4482586","first_seen":"2025-12-02T14:05:45.851953Z","last_seen":"2026-06-05T13:32:53.549162Z","times_seen":23,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/btc.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/btc.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: QRATOR\r\ndate: Sat, 14 Feb 2026 02:22:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"4bae6a37ded04d1a71c1c035f4aa5a23\"\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\nx-amz-request-id: 1893FBA5DC307FEF\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 25 Apr 2023 13:43:39 GMT\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: block-all-mixed-content\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2142,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4bae6a37ded04d1a71c1c035f4aa5a23","sha1":"3939945d1ee316841ba4cbff66026e10798d81d4","sha256":"445b47abd56e283946f651291e0536b0d2c8724223160d3b54976fe30abeef6f","sha512":"99de9d71c98d65d2f8e72afcd9fd0cde81b7bbdec474bbf0fab4ef98fc98deed6ff90121b543beb73ff25eef8e14296c53a38f7f1860cf9df8831f66dc2e1a30","ssdeep":"","tlshash":"404162e6b3d4f2d0e5428330d421c6b9b69f34b6af6ce74882804fa4ac0c24589cddd4","first_seen":"2025-04-19T14:20:06.99876Z","last_seen":"2026-06-05T13:32:53.621861Z","times_seen":108,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":143,"dns":5,"connect":19,"send":0,"wait":57,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-regular.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-regular.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:42 GMT\r\nETag: \"31a4-624ca130ee180\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12708\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12708, version 1.0","md5":"b4a68b1e743ee317eaaf0bbadd131571","sha1":"f24f7823d4e3830c7cfa5bcb33733d2897c00f13","sha256":"ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394","sha512":"b3bf2523c9cf0ed55365ff6f03375512d478239297a2af99b839f15d59e49094b03e085fca8918faa75b928fe1531376070018ea5fdb07c3e8743e6253a14ed7","ssdeep":"384:uvrIB27G1PF5LfsdGAu0lKtDvJL8REbg/qif0:sY27a8xovJg2SfM","tlshash":"dc42d0753492f402b159fef554ae6fb0f802d1da7b81bf574116d1a0461c8c789bee0e","first_seen":"2023-04-05T14:23:20Z","last_seen":"2026-06-08T20:09:52.923232Z","times_seen":7637,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-cyrillic-700.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-cyrillic-700.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ff-excharge.biz/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:54 GMT\r\nETag: \"4a64-624ca13c5fc80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 19044\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":19044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19044, version 1.0","md5":"df44ee40979875024fb744d7cee866fb","sha1":"a297cda056cdef7b2df5e9c2bb9287546a04e359","sha256":"90022378908d00183b467ac49700b9769014f34bd607e24956b17407325e5053","sha512":"9aa5012e30bda6b13acf0c050626eb838f57be2bb16c66b5f48c0dac27984640983b8cd836d23833ddee41fdc483280a44f3c4e5b46e75985a5a01992b5136ab","ssdeep":"384:iIPLFSfKVwhDZu10Ggwi403aUJIt1sMMP3GEvQUu2iPm/:NPwfrlGgj40bJC1sMMPJvd/Am/","tlshash":"1582d033339d6c96ee9d2e3d0857f8268c20ec9641a9b7f0e3de2b6548e0e564690171","first_seen":"2023-09-20T12:39:11Z","last_seen":"2026-06-05T16:12:49.501387Z","times_seen":83,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":49,"dns":1,"connect":25,"send":0,"wait":25,"receive":25,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/images/space.svg","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /images/space.svg HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Fri, 29 Nov 2024 02:10:26 GMT\r\nETag: \"12b5-62803b3c04880\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4789\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4789,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a8eca7310b779cd5e57fb7318e2fa9f","sha1":"4606c4ba866b1b6a2895bd1b9d507be9be4c4f0b","sha256":"0ebb50e016b4f46814dbcaa502e326093fb7030e7649f67141a6dc434ecbb859","sha512":"3667624f174e33b067a3b57c3abdd06701b9d75d18565d8c6df8cf9f660041530173889a03dcb2d322dc0a0db25a8f5bfce8e5e163ba70dbece5426c73687ee4","ssdeep":"96:cOOwOu2loDCmW1fWNt3FtVdwMRSNFSfGJ:AlEQWzVOMcJ","tlshash":"4ea1ffa0907cfdad9a05c5bcebabb4a6701f2065c753939cd2983c7687a55f37808374","first_seen":"2023-12-30T16:06:41Z","last_seen":"2026-06-05T13:32:53.615736Z","times_seen":71,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":616,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/assets/images/background/recent.svg","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:47.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /assets/images/background/recent.svg HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/en/\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sat, 14 Feb 2026 02:22:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: /en/assets/images/background/recent.svg\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":178,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-09T03:17:28.028748Z","times_seen":16257673,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":614,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ff-excharge.biz/fonts/montserrat-v25-latin-600.woff2","fqdn":"ff-excharge.biz","domain":"ff-excharge.biz","tld":"biz"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ff-excharge.biz/en/","date":"2026-02-14T02:22:48.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ff-excharge.biz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 06:10:33 GMT","end":"Thu, 16 Apr 2026 06:10:32 GMT"},"fingerprint":{"sha1":"45:1F:7D:8A:88:82:B8:EA:1B:86:79:59:BE:40:3D:82:CD:66:6F:B2","sha256":"8A:B0:5D:BD:D1:AB:48:F3:91:01:0C:F3:CA:54:89:7C:D5:FA:74:A2:F1:F6:02:9A:22:6D:4B:1E:24:8E:B2:F7"}}},"request":{"raw":"GET /fonts/montserrat-v25-latin-600.woff2 HTTP/1.1\r\nHost: ff-excharge.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ff-excharge.biz/css/min.css?181954\r\nCookie: PHPSESSID=r946tc43eca66940688it602mg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 02:22:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 19 Oct 2024 01:09:48 GMT\r\nETag: \"319c-624ca136a6f00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12700\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12700,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12700, version 1.0","md5":"e571167fbcce8d5081bce96a09930063","sha1":"e12420f5e4da3ccdc75a58ce744e7d5a0c6cf79e","sha256":"98be19bc78b5bc5d419e4fa6ea055ebd4671a963e2cc644aeed4362f15d14c31","sha512":"2a7e28d5e1cc8fcb4089f51a012ba801038c1e115102f68405c730f58b490f3c9fc352ba533e0bf062f965b5fb44239b1b8ba914863a72c68aeeb27101c31881","ssdeep":"192:9pyDYbbMYHexdHevLbDfo1HGQDo2hcNmchLzc83f55bA0hMMApntRt+BbzpsTOkg:9pWYHexWbDu5KcqjbMFovQTg","tlshash":"7342c07c8215e177b483a56c689724cc0881c73b7f80e059f71ac48a4f1798abc397f9","first_seen":"2023-04-11T17:49:47Z","last_seen":"2026-06-08T18:59:56.648487Z","times_seen":2385,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ff-excharge.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ff-excharge.biz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}