{"report_id":"1ecd46db-080e-437d-9e5c-61c428cbbccc","version":0,"status":"done","tags":[],"date":"2026-06-19T09:33:18Z","url":{"schema":"https","addr":"exchange.trxdr.com/","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exchange.trxdr.com/","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"title":"Buy TRX with USDT \u0026 TRON Energy Purchase | Fast, Secure, Reliable","dom":{"size":15122,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15107), with no line terminators","md5":"9fdc1e2fcd4fdbe7ebdd450eb4592637","sha1":"7078495ad9499db08639e74ec95f01f0d295d01a","sha256":"560907d54e74ef4f7c8bc9d2a51d06eef3278b241b933ba636e698579f732e56","sha512":"934936456088ac4521d3a6faa1634bca32eed924931f33adc8a11b2c8e0c9a83b1918bb24f98866bb2f56f47e4d4160740a2bca9643e1382b852704f5d73e8a3","ssdeep":"192:8msx9W449q7yVjLE22f/66qFy7pUm0kwtdcwiZhtXrYGEDdZGEDdhc9U+:zQW44LVy/3zGK0mbbYGE7GEL4N","tlshash":"3a629320558a523b70034be0f4f1ef9ee19ac309c6374cedb3ed828a6bc1d9c5e5a655","dom_hash":"domhash39e4f082b34dd88649067ffde0e89801","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"exchange.trxdr.com/","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-24T09:33:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"exchange.trxdr.com","ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-19T09:33:20.049705Z","last_seen":"2026-06-19T09:33:20.049705Z","alert_count":56,"request_count":28,"received_data":1217669,"sent_data":14342,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.164.243.88","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-06-16T04:10:17.997619Z","alert_count":0,"request_count":1,"received_data":937,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/webpack-559bc7523e2d6447.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b29a3085316a3cc99a22a46a2171f3c2","sha1":"290a1cb471e797dab0cd4ae7046a02a1a6f51b30","sha256":"236b44b65cd4751261b693d3faa2be87041969de0b89523305c09119c345c3f2","sha512":"c5ea4c1a500bed8224061b9e21ee10fc97e65cf2cd82c0bf51c492708c3a0816b8b4a27eae7e1a183a353b8229f6d9ff5fa95aea6134b1539bc6671aecfbf8ba","ssdeep":"","tlshash":"b471e8de32a5f4bd135364a5583fa052f12a34b2282ed570d71ad8f4bc34d9c8622fa8","size":3749,"data":"","first_seen":"2026-06-07T22:29:53.487279Z","last_seen":"2026-06-19T09:33:33.211821Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/framework-936b6e1e2733fb20a138d119.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf0dbea2c1509e290fc7ddbdd9477a3b","sha1":"296721ce3728c51c7fac5fb35c971baf5fd92b7b","sha256":"4250d53f0bc756ece2ddd690a008add1d7fdc887528c671f4dfe8d916d7787b7","sha512":"a047bef4736a82a41c60baefb59fd2d52c8027b3fcd788e3311ce5fd000ef719a80f0698a86e180fbffa708e0f30520bf6648e3ef15f62cf16b4ce237bb2ced2","ssdeep":"1536:PYjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRXQH:Qj3b536SJ1S8fvAH","tlshash":"b6d3f9e83996f6516ab311a700ef2803737d1a1b280c4960e215fd9e75b842bb17bfdd","size":139978,"data":"","first_seen":"2024-09-18T14:21:05Z","last_seen":"2026-06-21T09:11:36.004254Z","times_seen":2424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/main-b365397eee4c1c826b325bf9.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f61cb8419b1150180e1eb9e634fef2f6","sha1":"3d5c38e98f8b15ecd524c4001ad54ade6a391be1","sha256":"ef6a08178c9f2e90859d810aace35adc5ecbb33055085d85646a3a68391e64f6","sha512":"574d98a98af0f80fa7de5c1f36bd980f979e04e3389ca3c98ea5b1b1f14342219aa27109a96f94eaa692e45d66f9d72524ab7ce60300de565252b64d19072000","ssdeep":"1536:j8KeQDlfYtA1uQIuF9/opa3dX4NQpsBrylVdBe6L2CN6:dVYtyrQodINiqylFe6L9N6","tlshash":"c8b3e9b676d1f8a203cb41d4843b0006f36a1dbe146f6045b3aadcd6b96499e90f3f79","size":110815,"data":"","first_seen":"2025-12-29T17:26:39.785793Z","last_seen":"2026-06-19T09:33:33.194685Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/9uiURhh69LVXFdHcXCLx2/_buildManifest.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"643acb9d4019134d67fab1259bdd55e1","sha1":"9923edf7170ad989ed90992ab7ed7680d8045278","sha256":"9fe562cf601e653fe82771e0036844bf88fdc6a7723d9808f1b2d4792ddadd3b","sha512":"d881353476d6fa7b053f43743f399d499a94fcc02be98468f95b6db7aefca3a204bebd4f6c8a69b2bd0f403b7f39c0f6726794e8a69216a1dfd2633f533e958b","ssdeep":"","tlshash":"c3f0a0934148f8034966cc4ab1265733bf98807a1e390a2b96be9b6941a01e68f56826","size":450,"data":"","first_seen":"2026-04-25T18:24:20.034459Z","last_seen":"2026-06-19T09:33:33.212664Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/9uiURhh69LVXFdHcXCLx2/_ssgManifest.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-21T09:30:17.8393Z","times_seen":236392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/678.8b3a472beb783489.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e658bbe9c461b0886cd2afdcca454f23","sha1":"2f6f21a3d14f489c23eafce1c3cf4014aebf46d6","sha256":"e140e0ed25b96233fc9ae70e942e58e8be07a7e5231182371d5c39483467c3c4","sha512":"fc2beadadfa0b81de1a6446038bf029c6f49ea7faf0f0f549c0ed6f955bd5748b5bc612b6b0f6f1e1ddee43fc459db723960963f5b8bff3764809c47bf203d9c","ssdeep":"12288:2+j1kVKX5cqsiVinFGEFRvDAfFlClHQ3d0cyNLq:hncTlIyNLq","tlshash":"4dd46cc57725b433439a91ea846b1106f27cc8682c0d482cf7e8e8dfad959d861bbf35","size":605855,"data":"","first_seen":"2026-03-26T00:27:24.895708Z","last_seen":"2026-06-19T09:33:33.2151Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/pages/_app-ce516abe7c19a89656edd97b.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a2e1f9ffd8379b0566713c89e93db0d","sha1":"56f958025add98a579627a5b5f17add3936bf596","sha256":"69af2b151f013d69376c9a85f4569d97e4a36c345cd3c42d2d4ff214fbbd9e52","sha512":"12470984ba20a3e221596f7a5152c6cce1de705c435716d96c3001555c2bfc8c2aaa65e839a17277f86347e140a025a458588fd6754bb0112fb978612c53c77c","ssdeep":"96:DAQN8cm72Fvn1fcdmUkWFsg6c7ZdbyBMRc6w5K5oE/exkB7FmVs0x4mEFSncQYlK:do8c8cfbyerwoD9S9EgnvvUuJNIX6","tlshash":"6ef1e855b7d132b48793125473a77ae5b36f0cb002188838a3f4d99c29b0a4df966fdd","size":7649,"data":"","first_seen":"2026-06-07T22:29:53.467923Z","last_seen":"2026-06-19T09:33:33.205356Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/pages/index-0dc158c936d9c312c8a06706.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03055bcec90ab756327636054adca774","sha1":"57e6e2ca393f4c2662ef7b891379cd40704f331d","sha256":"15cefea3642d9eed9245f3d839fdad82e4d0a1cdeb60c3a3c009f12b200408a4","sha512":"896104119ab01c106dcc42cee9fdfdb49dd9d9b829a42993f9c9eb97f1f281e2cbc6f1228ea09f1061e5d9cdd6c1d0b0c6c0449969fb66e089bafe5f056c0595","ssdeep":"96:bAZqKTHVt9GC0DxR2ov0me20NmwhK/G/DVBRuQaBXAF6:U3RqdaXmwhRDVXuQalAF6","tlshash":"1591b5a236d2f81713594074803f5417b6a83d67185b74ecb365ccdef9a909c61b2f36","size":4625,"data":"","first_seen":"2026-03-26T00:27:24.881944Z","last_seen":"2026-06-19T09:33:33.201941Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/909.f841981a5a38ab18.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0ab222552efb9a6d2b32991dd210044","sha1":"d173cca456314c2ca451b45c1aecf0949b89810b","sha256":"a6bfa79532169cd9c547cba17dbbef116611348015172e1d038bec2f7813ca48","sha512":"b2cd715c77b3b8979aae4113902e4e2c37a9d5ccc862daa9dfa392fccd7774be56e5d2a7eef02dd8fc6442d96ee1ee33285d4a4640113dfc31c141dfef0c4b39","ssdeep":"384:mmaICbAtEymKDsxSgcKTmlFncOde+A4cRBkOoBbxBb7K584Nj5M:mmazA3hDCcK6lFncEHhxhm24Ne","tlshash":"edf2a54891956eacf4270a94ffef955cb12d5b44ca1e0cb8b2fc780266405da3b4bfc9","size":34481,"data":"","first_seen":"2026-06-07T22:29:53.489885Z","last_seen":"2026-06-19T09:33:33.191142Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exchange.trxdr.com/img/trx.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.116Z","timestamp":1781861576116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/trx.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-1ea7\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lb%2FPfilMnoRSzr5Qd030wPucxBYgNsfLhES0OHWAwqtXpHybm4Z7TD%2Ba1WuJhBVOmNjMhBmHTlx8WZmBpaNeUkEjRsLOgXNIoBrcZC44jrlpe3tV%2BUKc%2FeXLmeaPCWAbjuxzunw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 7847\r\ncf-ray: a0e18782bdfb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7847,"size_decoded":8609,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"029b0580175550cbe067bf8781e69a40","sha1":"46b168adb93aeb70a6a8253b1c8e3c10374592b0","sha256":"bb8241a147d46fd92dc194cd463f3bb615161b5d03cbaa21ea147fc9b17a1401","sha512":"3d7f016df41eaf21bc57aabf74624c9c5d4f0511d08cc62a516c4fbdc97456e510f5d9a8d5e21e04c0efdb8461b06ceeeef65fc4b92a9b6775339283a2e61c94","ssdeep":"192:CS66knlg4JWiUWq9gOfKRziMyDba4kYjhoE4mCiMfSJHcHKMXJaZYAX9sBmHpGu:d6Jnlg4JW3F9gOfKROMoe4pL4mCnfS5p","tlshash":"4ef17d46fe42b858860cdf087aeea32723bb4ac6cb8af141fcdac615bde1038d545185","first_seen":"2023-11-01T19:36:22Z","last_seen":"2026-06-19T09:33:33.19676Z","times_seen":180,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/main-b365397eee4c1c826b325bf9.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:53.666Z","timestamp":1781861573666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/chunks/main-b365397eee4c1c826b325bf9.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:53 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oU%2BgbPCIahXrQAmvLN6Ll4eHERLGoI4uYqT7gjVgtyGFU6R2eCa0867FoXf6Z6mDlZwuhHtK8vUNClW18qjHzZhDXL8P4zPiE%2Bqysr5Fg8Ijuda3mc4HmgjeYuDj%2BhRSuaKReBo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-1b0df\"\r\ncf-ray: a0e187736b6a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110815,"size_decoded":34956,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f61cb8419b1150180e1eb9e634fef2f6","sha1":"3d5c38e98f8b15ecd524c4001ad54ade6a391be1","sha256":"ef6a08178c9f2e90859d810aace35adc5ecbb33055085d85646a3a68391e64f6","sha512":"574d98a98af0f80fa7de5c1f36bd980f979e04e3389ca3c98ea5b1b1f14342219aa27109a96f94eaa692e45d66f9d72524ab7ce60300de565252b64d19072000","ssdeep":"1536:j8KeQDlfYtA1uQIuF9/opa3dX4NQpsBrylVdBe6L2CN6:dVYtyrQodINiqylFe6L9N6","tlshash":"c8b3e9b676d1f8a203cb41d4843b0006f36a1dbe146f6045b3aadcd6b96499e90f3f79","first_seen":"2025-12-29T17:26:39.785793Z","last_seen":"2026-06-19T09:33:33.194685Z","times_seen":97,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/909.f841981a5a38ab18.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:54.900Z","timestamp":1781861574900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/chunks/909.f841981a5a38ab18.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:55 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HS44vpDti%2FM2rZuEbymj%2B8H%2BN2K%2Fi%2Bgkzh7vus%2BL9RBogYtdL2c38C6qX9xrwYWwRkwvNhyTPochEYihEO0M%2FkM4qktQfluy%2F%2FehI1ScHFbAt619tDRZ8YZ9uEaxckRtU762M64%3D\"}]}\r\nlast-modified: Tue, 02 Jun 2026 15:06:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:55 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16d-86e9\"\r\ncf-ray: a0e1877b2ccd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34537,"size_decoded":11137,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34331), with no line terminators","md5":"a0ab222552efb9a6d2b32991dd210044","sha1":"d173cca456314c2ca451b45c1aecf0949b89810b","sha256":"a6bfa79532169cd9c547cba17dbbef116611348015172e1d038bec2f7813ca48","sha512":"b2cd715c77b3b8979aae4113902e4e2c37a9d5ccc862daa9dfa392fccd7774be56e5d2a7eef02dd8fc6442d96ee1ee33285d4a4640113dfc31c141dfef0c4b39","ssdeep":"384:mmaICbAtEymKDsxSgcKTmlFncOde+A4cRBkOoBbxBb7K584Nj5M:mmazA3hDCcK6lFncEHhxhm24Ne","tlshash":"edf2a54891956eacf4270a94ffef955cb12d5b44ca1e0cb8b2fc780266405da3b4bfc9","first_seen":"2026-06-07T22:29:53.489885Z","last_seen":"2026-06-19T09:33:33.191142Z","times_seen":3,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":611,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/css/Orbitron.ttf","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.108Z","timestamp":1781861576108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /css/Orbitron.ttf HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://exchange.trxdr.com/_next/static/css/99d6b140b5529d74.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-9694\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EYwfLDQXQnEKrwfUdF1I5NWpgew5WPRo5DYZ%2BAwyl2IM4gkr%2BezgMluET76MFxppkB9MPONZBwMjkYJe25%2Bj8Ov5Q3%2Fjs06leJTrk6ljwZ2BJVCVI%2BL%2Bt9u3e4shOXQxewahbQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 38548\r\ncf-ray: a0e18782adf61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38548,"size_decoded":39333,"mime_type":"application/octet-stream","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 27 names, Microsoft, language 0x409","md5":"8c918f61234884ff360426d3d1f3dfd3","sha1":"1f13abb00f097178cda113ec970e8ad01e62c584","sha256":"46eefc7084fd9abffd87547c47f729b6071c7f7a8d5af281266bb09e5461c435","sha512":"375eb5861728082637a44b888b254a8f4666abb717bd8b611f26326b54c0f39f8e954c3a8d82c9cb4f433bb1c3f17d65fc86e3df802b8e47f77c499309f95e16","ssdeep":"768:ctmCvw8gMV9d7NYCN524sMCrveY1yX5bg/4K3oFJ/AjvhBA9A7dAPgAzUCAPqnD8:4vwYV9n4YY1aaoFJ/AjvvA9AJA4AzUCM","tlshash":"ba034a1257665329e0692f3d84bb174d6a39f6127e13a32b3a2a9536cc7b373ce053d0","first_seen":"2025-11-18T23:24:37.821402Z","last_seen":"2026-06-19T09:33:33.209876Z","times_seen":110,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/us.43e787159682735a6e89.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.114Z","timestamp":1781861576114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/us.43e787159682735a6e89.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-ba\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZGfZb45BrLmIter9%2FxjrAmPiVVJWlEAx7PRoX4n8quIfgLWoxmnOZbyFapcdJ8uIblolOwJWsyin9E3Hmif8qfYxDYxr7v5f7Kupa2fc1ebHAjzc4uSuT2krtbIeNwnMfoFmz8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 186\r\ncf-ray: a0e18782bdf91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":939,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 4-bit colormap, non-interlaced","md5":"9cc0a94a208dd8a2a73848f51d008df2","sha1":"bb04b071595e3c2df682cc6d02fe29122ecab245","sha256":"82eb2432bd1044ea81f7583cbfce93c0901295b9207a20e0b1336ebf1d0ead9e","sha512":"60ca8c77e9fd0c223add987cdfe73110f299b99f5a714983908a0a69861b385de06cfbef79ed6fd329ac34496581c460e2cb655f570e469f5f5f195b784410d6","ssdeep":"","tlshash":"d6c0c0b3a365ee44c10e251390e8030177743f250d31b01ea1cc895b049e34300c1dd3","first_seen":"2023-12-21T13:01:40Z","last_seen":"2026-06-21T01:31:54.349793Z","times_seen":660,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/tokenpocket.ab246f861798cedfaff1.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.119Z","timestamp":1781861576119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/tokenpocket.ab246f861798cedfaff1.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-887\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZabR%2F0PFhdVEI53sAtt3uTe4T2usJi4NiQxIkuI6gv8HiAGixuqJHiDyiRmjLTEkS5KpkjmXKtJ2ApZTEv4NQlZgrHVP4k3PctuZwk2bzM7wmZMxfVO65m5jqFAd%2BqzuGhaW5A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2183\r\ncf-ray: a0e18782bdfe1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2183,"size_decoded":2940,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGB, non-interlaced","md5":"76df18a0c5becd5d1b79210d373e2589","sha1":"e6e294024e8c7be243f0585b5493489e57bc9f8a","sha256":"bd99cba9c06e7c20913639fd05e89d844272c11f5f7e17d271053d9bc6131445","sha512":"9eca78c8e38e82db6f576920adf6c5206fc067b827a4265d0008dd114937c04467a33390a3fc8fe1c3ad233b435c786e94a0a33d879155d4d4180ae906a7e706","ssdeep":"","tlshash":"88412bda22249367c89f3b3d70f4d8e091e484a711598d903f8d9e4035d521a70af2ed","first_seen":"2025-06-26T16:07:51.296732Z","last_seen":"2026-06-19T09:33:33.193216Z","times_seen":131,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/678.8b3a472beb783489.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:54.898Z","timestamp":1781861574898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/chunks/678.8b3a472beb783489.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:55 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzDPinj5ah3Zgp5USO%2FCKT1VGDpg1ZqjMggc4UYuaq4NhTdbYXWsJdRhWhcoCoK5WIr4ZdxLS%2Bo2GK1qSOhSV8JLxZEXhUQtb4ky%2Fs5lzdLAXwCNjkVpj5eSBlAKKULsEeR1CrQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-93e9f\"\r\ncf-ray: a0e1877b1ccc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605855,"size_decoded":185161,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e658bbe9c461b0886cd2afdcca454f23","sha1":"2f6f21a3d14f489c23eafce1c3cf4014aebf46d6","sha256":"e140e0ed25b96233fc9ae70e942e58e8be07a7e5231182371d5c39483467c3c4","sha512":"fc2beadadfa0b81de1a6446038bf029c6f49ea7faf0f0f549c0ed6f955bd5748b5bc612b6b0f6f1e1ddee43fc459db723960963f5b8bff3764809c47bf203d9c","ssdeep":"12288:2+j1kVKX5cqsiVinFGEFRvDAfFlClHQ3d0cyNLq:hncTlIyNLq","tlshash":"4dd46cc57725b433439a91ea846b1106f27cc8682c0d482cf7e8e8dfad959d861bbf35","first_seen":"2026-03-26T00:27:24.895708Z","last_seen":"2026-06-19T09:33:33.2151Z","times_seen":36,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":603,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/WalletConnect.d3cbce2fc097e73eec80.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.117Z","timestamp":1781861576117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/WalletConnect.d3cbce2fc097e73eec80.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-1394\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hd7Jmycbz6rYXd8EqyIzBwSjVQpdCIILDpvg0dBmJPHa9b20o5GRpmY1jWlNyozk%2FpZOv2rr%2FLobfRJX%2FRwUaRdAtro9ge%2BKD63xE%2BhKcHY4IGmzdRxLX7aXphkmsu3EJjNeDFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 5012\r\ncf-ray: a0e18782bdfc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5012,"size_decoded":5776,"mime_type":"image/png","magic":"PNG image data, 1000 x 692, 8-bit colormap, non-interlaced","md5":"e4d5216b884d99bb09fc59c1e4bf9a67","sha1":"58d905084f7abe2b2e5c3e3fd59a29c24a7fb7b2","sha256":"0fe9c0181028aeb6a46f07ce131a3c912fec5c632cddfb13eb2e1ca39da9505f","sha512":"17f258b7b2063205f9105a7ce1251225afca63f2398f1bc7ca3e501c793333024e0762e428fda9608da1739e88ffc2bf89894295de59dbcf3816cd58072454b5","ssdeep":"96:XStJiGUbFMArS6lfHpn4TgSuTmaF/ipkbnXpejT9RxaPbKkxOz7LNIT:XStJiGUbFwSp1SuFiybn5ejTGbKl/BM","tlshash":"e2a15bd2a4ebac81cbd412751421dc52bd27c972c6c2c1a7eb3b982d09d6ea94c3a31c","first_seen":"2025-06-26T16:07:51.289575Z","last_seen":"2026-06-19T09:33:33.204496Z","times_seen":135,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/tronlink.0a37f1e019358389cdf7.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.121Z","timestamp":1781861576121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/tronlink.0a37f1e019358389cdf7.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-1bc6\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8WKsigVP9h8RTjwbz19EGxSLX06TM6qXremM1%2FB2q%2BJqmzt253ZcqpejH9VShvHpKotAYjOrCEgNfYRXfJlOhtHiLUUmMhTCGvXXVk%2FAIZjbcj8YaWolDm6SZeP5I8C1SbHmWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 7110\r\ncf-ray: a0e18782ce001525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7110,"size_decoded":7870,"mime_type":"image/png","magic":"PNG image data, 93 x 93, 8-bit/color RGBA, non-interlaced","md5":"41d851008b4090fca47edb4af65821b5","sha1":"a85f4865794e504d274e9ab5d5e0d79829697246","sha256":"fb1612c3f4cbad017db9eb194a166f42b266e0927b619b879c0ac8714d204daf","sha512":"515e0b544ee25d6469df54f317612c6212f55152e0c9acca8b31740e483f5f0752e4fe85572116594f7abdb98761713d7c03e74d2038b1396a340c61964316d2","ssdeep":"96:7SHy5TwYKL2vD0bWgJP4x/S19U0/ssFtdcGPfssctmHMSVIET+pWsrujnsvaSEKM:OHuwYy+DlG6q1mQsac/H3phujE3477oy","tlshash":"65e1ae92f348b471769d2163efa3510890bcdcc887afca08a013ed2de88c13b854b772","first_seen":"2023-07-31T21:17:56Z","last_seen":"2026-06-19T09:33:33.213473Z","times_seen":163,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/bitget.1218f8f1c4cf98e0da2d.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.126Z","timestamp":1781861576126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/bitget.1218f8f1c4cf98e0da2d.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-5c60\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hov0gBsTSJpVUWMzs5CIrdHmMp2R3Rghu5flVha2hdHRuTJc3sMbnOgntSUdcJOJhSF%2FLqEnoHg5N%2BVzGsl0DPpYGyg5aaNbomKwJ7zJd6oY1CKuvHBElb5bKkV7bB%2Bz5cexvlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 23648\r\ncf-ray: a0e18782ce051525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23648,"size_decoded":24409,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4801dc41e96f0a1427e6e259f4bc3053","sha1":"544e78d56a99a160dc5a35e01f45ee3c0d125caf","sha256":"d6a85a64ae0884c30652428603d242177edd1e59915d0d7922ab09847d357867","sha512":"252cbeecfefe9e6043d97fff407faa4018013e9d2426d614f496347d75e8bf72c79885fcdafab4f31c5077e55c76364fbdcdec8ecc0d77ed36cc16f3f5c86f73","ssdeep":"384:DGWwg4QS3EGuDt9Ti6AclEoYwPLBSCGlzQMkS/uZswW5YCFlmnNJfzIK36n9S:DpS3EJDzT3Acl5RBSCGxkS/8C7mNJ/3T","tlshash":"93b2e1285d7ee7aa0d9242f2c0913e7dc048b4d7adfa497b0db6ab3f041b4b53865007","first_seen":"2025-07-25T10:07:59.76729Z","last_seen":"2026-06-19T09:33:33.216705Z","times_seen":128,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/pages/_app-ce516abe7c19a89656edd97b.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:53.667Z","timestamp":1781861573667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-ce516abe7c19a89656edd97b.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:54 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E98udr48JocNcntLNZU1DhmpNUTg0KCe9yXBiO4DiZJ7nVopdJEbaFXEZYf5zznn6pHHADdOCqu%2Fe4rfFmh3teblPpWJab%2FzegszgX7jouKrIaIj9BMJBaoIPYcE0WQ2Ax50F2g%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-1de1\"\r\ncf-ray: a0e187736b6b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7649,"size_decoded":4305,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7607), with no line terminators","md5":"4a2e1f9ffd8379b0566713c89e93db0d","sha1":"56f958025add98a579627a5b5f17add3936bf596","sha256":"69af2b151f013d69376c9a85f4569d97e4a36c345cd3c42d2d4ff214fbbd9e52","sha512":"12470984ba20a3e221596f7a5152c6cce1de705c435716d96c3001555c2bfc8c2aaa65e839a17277f86347e140a025a458588fd6754bb0112fb978612c53c77c","ssdeep":"96:DAQN8cm72Fvn1fcdmUkWFsg6c7ZdbyBMRc6w5K5oE/exkB7FmVs0x4mEFSncQYlK:do8c8cfbyerwoD9S9EgnvvUuJNIX6","tlshash":"6ef1e855b7d132b48793125473a77ae5b36f0cb002188838a3f4d99c29b0a4df966fdd","first_seen":"2026-06-07T22:29:53.467923Z","last_seen":"2026-06-19T09:33:33.205356Z","times_seen":3,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/pages/index-0dc158c936d9c312c8a06706.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:53.669Z","timestamp":1781861573669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-0dc158c936d9c312c8a06706.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:53 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWXGU804Rumt8EZHMxa55FI1VUWvgjxkKjcGpGbmyUhFmsEbv7jcOA0rz3OaROGgPvDKRxVscbBvsDTeQASb0z9wDS%2Ff7lJ6JKk1U48a%2F5RzIXZeMlsoK9oBtXO4Za4aDRHe8fo%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-1211\"\r\ncf-ray: a0e187736b6f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4625,"size_decoded":2606,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4625), with no line terminators","md5":"03055bcec90ab756327636054adca774","sha1":"57e6e2ca393f4c2662ef7b891379cd40704f331d","sha256":"15cefea3642d9eed9245f3d839fdad82e4d0a1cdeb60c3a3c009f12b200408a4","sha512":"896104119ab01c106dcc42cee9fdfdb49dd9d9b829a42993f9c9eb97f1f281e2cbc6f1228ea09f1061e5d9cdd6c1d0b0c6c0449969fb66e089bafe5f056c0595","ssdeep":"96:bAZqKTHVt9GC0DxR2ov0me20NmwhK/G/DVBRuQaBXAF6:U3RqdaXmwhRDVXuQalAF6","tlshash":"1591b5a236d2f81713594074803f5417b6a83d67185b74ecb365ccdef9a909c61b2f36","first_seen":"2026-03-26T00:27:24.881944Z","last_seen":"2026-06-19T09:33:33.201941Z","times_seen":37,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/ticker/price?symbol=TRXUSDT","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.243.88","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.103Z","timestamp":1781861576103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/ticker/price?symbol=TRXUSDT HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nOrigin: https://exchange.trxdr.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 41\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 663ed464-e90f-4ad8-93f4-f77634abd918\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: XrtIXer6eHGWxCx1qdqS70qWC-i9rq_HJPbYeIjdAgQWHgs1DSLSIQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41,"size_decoded":937,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5bfd5024f41b6b87036200186313fd09","sha1":"8f1c44ec5af9b8bc58a4888281bf15c96228e8f9","sha256":"2cf87759e09b4441336913ab72a1abea4aba54c47182ada41700bdd79b7f639f","sha512":"96b381f65f44fe25feced8423f10061852379b0e6f05533627f31fea624d57f76c5e0bfba990d98aa2451263113f436842eca4d3d19e456183d5ff2b47f96cfa","ssdeep":"","tlshash":"f2900417330c5d05c011f445d5c31d050140350143f1470d144d0c34115035f371d3d1","first_seen":"2026-06-19T09:33:25.017281Z","last_seen":"2026-06-19T09:33:33.207873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":7,"connect":8,"send":0,"wait":254,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/mathwallet.a7cfc8ef943d3575a818.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.124Z","timestamp":1781861576124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/mathwallet.a7cfc8ef943d3575a818.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-a064\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4D4ODAUS%2F3eTnqYp%2Fny%2FiM5OFBeu7vkxAwpCRuiARH0c17Y6y8Z36iAc%2BeUdUq7b7I2p5WwQ4rrmYSOeL3ovoGp7cbbR2F8jHU9K8AKOwJULm5O%2F26V03T%2Fcs%2FKNcyl6ilTEOvM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 41060\r\ncf-ray: a0e18782ce031525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41060,"size_decoded":41829,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"3a2e4bf8f9581ba07a0805e329ac8634","sha1":"6f14380628f50a47ade5bbc84d3717188fe319fc","sha256":"52a946b88cb1df57f580d5c34be2f73a2f0f252240c59280b9ebaa7ba1e8400d","sha512":"e26aba005950957324ff61d049aa8376321dd320ebff362494819cd9c3023a44035cd4001500f621a38ec06c9eef196d932ecb19f8a3030056231e7ce2398328","ssdeep":"768:mZdn5Ak6h9hsEE78ex3U5/x3MxP4rnxnUOTYk1nLfm2WRF7:knAh0vJU5Ox4rnxUM1nLfmlRF","tlshash":"c803f11f0c5889f7de0a0f93319f1104ca63b227803d9bc7e5a1a982bb46ff1d56a55b","first_seen":"2025-07-25T10:07:59.649987Z","last_seen":"2026-06-19T09:33:33.199186Z","times_seen":128,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/klever.911df6b1769535229a31.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.125Z","timestamp":1781861576125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/klever.911df6b1769535229a31.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-43fa\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3VUXuowd4TTXi83LpWaE01f2KZKSsrZlK1%2BkarPHjXg9fmi%2BnrPGKfoJQ8%2FF4JK0MPXy4NfbJWkzYfcDG4rYGKs1t7W8%2FaP3pdbqDjwyb4fTqrYz5X3JIsIdGwVhkwiKth60Gtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 17402\r\ncf-ray: a0e18782ce041525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17402,"size_decoded":18165,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bbe977a0cab892e73b3b5983a2933089","sha1":"0a84b580561afeacac052205692e0c6ef92f9511","sha256":"0de31c19c02b311738eda4990138b1908fffebd3be29a576411be68f3b68b722","sha512":"5b1b9afe21a68dc6b5d14fd61de0b500909818554a1883f2c72dc7e85e8e0df64b0a74794fc3b5b4b7185058364e813a3c0903bea086b564722bc0f1d312466d","ssdeep":"384:Yyd/kvrif6K+AlHEAkoebGoeJLAS+T94/ekcVqxOwL:YScj7ANEAoqz+TKiQdL","tlshash":"4272d0b3ac5de2d35384857b67a33d123a500e3a09f1f75c88fc2854b4baa21de4c938","first_seen":"2025-07-25T10:07:59.743611Z","last_seen":"2026-06-19T09:33:33.210862Z","times_seen":128,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/okx.f6e7ccf098ebc9df814e.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.120Z","timestamp":1781861576120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/okx.f6e7ccf098ebc9df814e.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fqjhiy8BeL8BPV5i3tf6T2awFMTpVgZwweLUaZkMUWZGosvh28qGnuOxDqnW2t3dAfS%2FaQa49mNKBfVqK04BJngVbcxRwc7Rmn6I84XpIcRBZB7%2FZ9T%2FEbhg9Yh6xZjXkV9CR4M%3D\"}]}\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-28d\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 653\r\ncf-ray: a0e18782cdff1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":653,"size_decoded":1411,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit colormap, non-interlaced","md5":"665e88640125bbccbd2db8e0913625a7","sha1":"eeed409718e1d1a274d07316cc341ad5e7fd9ea6","sha256":"baddc63d3e00843b92911baa967ef255253a7af1384f9afdb0713f4924ca4b04","sha512":"889cab02d006dd23378e5cc74905e9bd5322858bf6a59717895aea0ad1629e7e2a7b713e29fd46e2388ba09306c47190e04e8a9983d2605b26baea8f81af4a74","ssdeep":"","tlshash":"5cf0a2c253e75c3cf7587c7cd7e1d926a8b12bce6d598243455a19ac78934264510b81","first_seen":"2023-05-07T21:47:35Z","last_seen":"2026-06-21T08:15:27.034192Z","times_seen":375,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/safepal.c0106641859945747a9b.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.123Z","timestamp":1781861576123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/safepal.c0106641859945747a9b.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vc5cjz%2Fk%2BUgVfQ%2BvA4Oe0VImA0gRRxjMqiU82ehJ6HD61aXbgrjrObxHK8gB3F9%2B8qVrzzWrrsQig70%2F6BUumBVndg8%2B%2BDNT4QgDnysJFRxL%2BY8m9YMFJ5U3hEC5iMJbluNzTCs%3D\"}]}\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-6c38\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 27704\r\ncf-ray: a0e18782ce021525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27704,"size_decoded":28475,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"511edb00b41c6cf27e9299653ed58d3d","sha1":"bb90e90d443d587062662d7a719a78e0eb7b1aaf","sha256":"94b7474af21dd057ca9b8e18a896866edfb239137cc86c821d8951c9381a2264","sha512":"9ee86a26b02b5d601dc06bc326f4996940ff467d207f2cb5a00d71e95fa424ccb91fee7ddd4cb6f8fe2b6bfb7df774b78a56bcdf2931d0cb5b367adcc55c6d73","ssdeep":"768:lmd3lJorhZKPb3G0pcW18JDZ8GJi+8/NmskK1WnMjnvApKLVp:AXJkcPC0pF2ji+mNXkK1dYpi","tlshash":"96c2f11f96ba97cb27958777e4d22084f8a73652e1205acb08b25cec2c45dfdd4b4d23","first_seen":"2025-07-25T10:07:59.637554Z","last_seen":"2026-06-19T09:33:33.214273Z","times_seen":133,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/9uiURhh69LVXFdHcXCLx2/_buildManifest.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:53.670Z","timestamp":1781861573670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/9uiURhh69LVXFdHcXCLx2/_buildManifest.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:53 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SdwSOoXKHDVzzYyO6JOIBkoTjCOJumbsC75QDG5qXStcE%2B0wYoH3krhA699wcJkzzbiQji7M9X%2BQGAZAhReXHcJkqkOon3MDeImCxWPqaZMH8WKQHo%2FoBX6hNncUdFH%2BljaQuqM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-1c2\"\r\ncf-ray: a0e187737b701525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":450,"size_decoded":1027,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (450), with no line terminators","md5":"643acb9d4019134d67fab1259bdd55e1","sha1":"9923edf7170ad989ed90992ab7ed7680d8045278","sha256":"9fe562cf601e653fe82771e0036844bf88fdc6a7723d9808f1b2d4792ddadd3b","sha512":"d881353476d6fa7b053f43743f399d499a94fcc02be98468f95b6db7aefca3a204bebd4f6c8a69b2bd0f403b7f39c0f6726794e8a69216a1dfd2633f533e958b","ssdeep":"","tlshash":"c3f0a0934148f8034966cc4ab1265733bf98807a1e390a2b96be9b6941a01e68f56826","first_seen":"2026-04-25T18:24:20.034459Z","last_seen":"2026-06-19T09:33:33.212664Z","times_seen":22,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/9uiURhh69LVXFdHcXCLx2/_ssgManifest.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:53.672Z","timestamp":1781861573672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/9uiURhh69LVXFdHcXCLx2/_ssgManifest.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orKf6tePUIDOm%2F4671jq1SFRjRI7EvKiI651QIqWM3WRTITqt57PczW%2FPpMhyBhKRZ%2FnfMTVRsVc7roubWx4nJ9OmizeVmoMI8waPaNho91IqWep6NQB3YAdolimYvp4sxJR8Dg%3D\"}]}\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:54 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-4d\"\r\ncf-ray: a0e187737b711525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":824,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-21T09:30:17.8393Z","times_seen":236392,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/apple-icon.4349064f55009265adf4.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:55.103Z","timestamp":1781861575103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/apple-icon.4349064f55009265adf4.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:55 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8pkop4fPFOkzNzmXshADPw0ZpyWm0zR0jGZ89aweHej7ynzDHabYySKf%2BV4QNoD%2FA8yVriDOkGIQZW8OUn%2BLFJkygAIkbjjwIWjuOVS%2FOUYwhnAK9ZMi13LS%2FVuZ1mPsjcphgQ%3D\"}]}\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-893a\"\r\nexpires: Fri, 26 Jun 2026 09:32:55 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-length: 35130\r\ncf-ray: a0e1877c6cf71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35130,"size_decoded":35898,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2e53ce1a6aec572248e9c9ddf85a48c9","sha1":"024d79f53e165246b11454a6f94e36e40a48560b","sha256":"ee5f379f1e01e361da581ca9608b979518f03e57dc3103f76e917d7e55d0e1e1","sha512":"af9cda9ec631fc81cfb31ca56f6fd2e04c2fcb7fe135701f4f49d8f7e18505308b666980d673a8759cc9c29a267632cb53a16add884b57f7038e67ccbf09c686","ssdeep":"768:xAAQN7zC7ws90l+cilVCQSyk7QU1mt9ake7m8yneDarTH:xVQs7pcIjkv1C4PyneD8TH","tlshash":"05f20225913e8ab2c80f1ad8776e7de62c16c8c0c3131d0b4949c2dd671bb939c89b9d","first_seen":"2025-11-18T23:24:37.778445Z","last_seen":"2026-06-19T09:33:33.215923Z","times_seen":112,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/imtoken.ade1709f7103d4b2d73c.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.122Z","timestamp":1781861576122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/imtoken.ade1709f7103d4b2d73c.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-2973\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrUwdrPe1HVXg%2BeJVUTMTMafxvm4Xl4ysX0atCeKiAKn6MVPs%2FdL3l3%2BTBZhCDFazFK3u0%2BXmDb%2BsN22vxPMdChLEowTfZy3dTo8dC5Cn4r5fGE0DbVg8CGJhCofdnYNtq%2FQRys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 10611\r\ncf-ray: a0e18782ce011525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10611,"size_decoded":11378,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced","md5":"64782bb45106380402d482c05a2bc29d","sha1":"e6acfac147e8c8f492aaa84a4312deab117b63ab","sha256":"cda09ce7738aa7afc103b11fd63f99773c714a0bee0c05f24eaf586aabf6e8eb","sha512":"d3001489420da0bd938335d16944f206d10878c20e220eaaf95488f0e05404466bb2cde31f5bcb5c86217cca3d5ac38c431c88683aa36c0daaaa50e408064eb3","ssdeep":"192:oXS+P+d50EKEm2qX0/39Bz8WbK8hTfaUv0HY7ox7d7C3OalKwqNMfK:oCa+dVmA3oWbKETDv0jx7Tal/qyfK","tlshash":"fe22ae57515f2022632e20baec9896e5afd89b5c7c431ce3d28015ff8f9624f63945f2","first_seen":"2025-07-25T10:07:59.699014Z","last_seen":"2026-06-19T09:33:33.198331Z","times_seen":135,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/css/99d6b140b5529d74.css","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:53.659Z","timestamp":1781861573659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/css/99d6b140b5529d74.css HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:54 GMT\r\ncontent-type: text/css\r\npriority: u=0,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:54 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7Qip1%2FFe99j0%2Bzu6stpLCbxvVSp80jX5jCmdbTJ1FzYyq%2F5xCODnJGFZMi63x%2FEOq9bWMvzNUVDCvYTtnJxzgPlU1BGYZnxi3u86wM3ppDEKwv%2Bz2ttop2zTFM9KyzMapCVd8Q%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-760c\"\r\ncf-ray: a0e187735b661525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30220,"size_decoded":9935,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (18323)","md5":"19fa7fd0b4f38fcbee43c3effa9796a5","sha1":"2f11e3464cf5f65de80d1bbd8c14c25c9c8d94c2","sha256":"64ec803d4919b317060c3dc5e181c6053cb859ef43d7ba95f4d799ed69d777c6","sha512":"c308aa56fa5e7b2a9a8aecb9aecbba114dfb341cbb00299ed5936b3662b4ab74e45a683f303d17091d847b597a0bdd24ed8f2cb32d8fe43c7941532456f8defc","ssdeep":"384:xQ0r3MFSVU4+iIxKMCDXXVf43H2wakjPJBSeVHr4J:m04QU40KMqXV4Hykj/kJ","tlshash":"ead2eb79a644043ebc17c1f6e5e0b99c712ee0c2fa3657b9fa56211097c26eb29a3704","first_seen":"2026-06-07T22:29:53.466964Z","last_seen":"2026-06-19T09:33:33.200986Z","times_seen":3,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/framework-936b6e1e2733fb20a138d119.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:53.665Z","timestamp":1781861573665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/chunks/framework-936b6e1e2733fb20a138d119.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:54 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvhpRJqjRaeR4XIr8kJdIRIYaqlZuTv3k8NT7iesiVPF2lvT0R9zVN42jZsIhebBFZftnWeY1J9L64d%2F6uWprk7vJs3q3Wfhe6chcOn64SyNnRThM4QgeuKo%2BxXKvy61%2BGcVnkE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-222ca\"\r\ncf-ray: a0e187736b681525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139978,"size_decoded":47733,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf0dbea2c1509e290fc7ddbdd9477a3b","sha1":"296721ce3728c51c7fac5fb35c971baf5fd92b7b","sha256":"4250d53f0bc756ece2ddd690a008add1d7fdc887528c671f4dfe8d916d7787b7","sha512":"a047bef4736a82a41c60baefb59fd2d52c8027b3fcd788e3311ce5fd000ef719a80f0698a86e180fbffa708e0f30520bf6648e3ef15f62cf16b4ce237bb2ced2","ssdeep":"1536:PYjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRXQH:Qj3b536SJ1S8fvAH","tlshash":"b6d3f9e83996f6516ab311a700ef2803737d1a1b280c4960e215fd9e75b842bb17bfdd","first_seen":"2024-09-18T14:21:05Z","last_seen":"2026-06-21T09:11:36.004254Z","times_seen":2424,"resource_available":true,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":583,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/Trust.c831de729129532ccd1a.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.118Z","timestamp":1781861576118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/Trust.c831de729129532ccd1a.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-1015\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwxWmYuu5i9tb0E2ANfipW3lQB%2BPW%2Bs1O2ANfVwpQPDCioAa7HdWHyu3sZ52ZNegZRMhSzkUdNAOZ10YC4FSZE3LHdbLvxoc67D8KgUkQ7SmGnW5IZAOsznFsNQtQlJfo2d5gak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 4117\r\ncf-ray: a0e18782bdfd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4117,"size_decoded":4875,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"93b67a3e4ea968584b96307da79079d7","sha1":"44d4108bc0cfe97dc16aa97090502014bb0cb5f0","sha256":"2b28e10267c900818bdd8c1cff14472cc6e70c81ebe8eba7c7d7fe27cc007bc2","sha512":"29f0a6afd9eb034b74550e85f62c8fc1d2bb5a135c6d6c680b180859d0bbaf58b31f112e6fbc93d56752b372cb6b72b76e10a65470db770f7c02268a5762c179","ssdeep":"96:FHvPzwSrSzezoQzqhixJHvVoiHtciiAvuP/t+:F38SuzkoYRxNNoAKcQ+","tlshash":"06818ecfa991c5345a106fbc1c8100b4b679396991b52a3d0cac2b2d458ad68cbb53dc","first_seen":"2025-06-26T16:07:51.291178Z","last_seen":"2026-06-19T09:33:33.197583Z","times_seen":142,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-19T09:32:52.796Z","timestamp":1781861572796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:53 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 02 Jun 2026 15:06:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=md2RzQENMaIUbok2f3yT%2Fw5giLmiHUOmsEt053E9bbNZ3%2FxsoWOQ1bm1lXVc0cfy7j2LWXkcJS4IdSWFos8KFlhOlmbysyHKa7vBeG%2F%2FicU%2F5OyzfyO3OADMWOqHaLf1rsRKeY4%3D\"}]}\r\ncf-ray: a0e1876e3aa61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2025,"size_decoded":1640,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2025), with no line terminators","md5":"d860cc013539422f7c5d847783fed529","sha1":"f9f8327b1361a4ece018ddc85c230d393f15be4e","sha256":"a718607d64c5bc084ebf02bb93f5e7494a3025366b71858d5dedcd862f25118d","sha512":"f8f529f5c7b096a41a67dac83b2c7f88be039f1d067b553a8f48171d055d3bcbd87dd45b45a9f25a427012bb3a193a9daad1e5237737b4eeb0b5c26b45a19b29","ssdeep":"","tlshash":"10414383cc06cd9a1a205abee466f31d9016d836c1fcd8487ace85ad09b07c78f67d95","first_seen":"2026-06-07T22:29:53.486393Z","last_seen":"2026-06-19T09:33:33.199943Z","times_seen":3,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":11,"connect":21,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/_next/static/chunks/webpack-559bc7523e2d6447.js","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:53.660Z","timestamp":1781861573660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /_next/static/chunks/webpack-559bc7523e2d6447.js HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mldM%2FJDRSuKjgdq4wanuTPqVrTXqYihJgGbVZSwkE4V1qOigxB1REP4AbqtsMmMSLKeJWucesSi%2BvGJrFyuu8juo6KE0ncWCT%2BmNx1AtXKKMjlEfi8n4%2Fp0Cd6LkP6iNREtxk%2Bg%3D\"}]}\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 19 Jul 2026 09:32:53 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-ea5\"\r\ncf-ray: a0e187736b671525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3749,"size_decoded":2794,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3749), with no line terminators","md5":"b29a3085316a3cc99a22a46a2171f3c2","sha1":"290a1cb471e797dab0cd4ae7046a02a1a6f51b30","sha256":"236b44b65cd4751261b693d3faa2be87041969de0b89523305c09119c345c3f2","sha512":"c5ea4c1a500bed8224061b9e21ee10fc97e65cf2cd82c0bf51c492708c3a0816b8b4a27eae7e1a183a353b8229f6d9ff5fa95aea6134b1539bc6671aecfbf8ba","ssdeep":"","tlshash":"b471e8de32a5f4bd135364a5583fa052f12a34b2282ed570d71ad8f4bc34d9c8622fa8","first_seen":"2026-06-07T22:29:53.487279Z","last_seen":"2026-06-19T09:33:33.211821Z","times_seen":3,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/favicon.9d74758fa14339bc0ac5.ico","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:55.105Z","timestamp":1781861575105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/favicon.9d74758fa14339bc0ac5.ico HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:55 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 26 Jun 2026 09:32:55 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UghkF%2Fnge1L9zWMnVVT0K2qzDy4VQlj6aXCW4bO4wHRFm%2FKWzR82teoEkn7U2YjVZfImog1uDNnF5y11Jr8%2BIuyOAqYOBBho8PnMX4ReViOVVfclH%2FIYUlx8mAPO1EJQAMA4m4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"6a1ef16c-3aee\"\r\ncf-ray: a0e1877c6cf81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":5589,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"20e4117e295f11d979d7d0342e810c24","sha1":"7be9196c4750a3057359366fde508e306955924a","sha256":"138d253418d5d787d23bd0e837f4bdeff2ff0381ff49ff1860b5711cd1e4ee4d","sha512":"abd6680552e6aebd77bb7f7729596a74dd7e23c655f4744f5b1ca33758c9651bdfb4f14ffbf52ecaa1f31358c43f7eacceb09371d038762d8d0587ab0aaed746","ssdeep":"192:jM+zv/f/Hfj7Ir+vplZqv7ws2C3jXZ6D:jvzfj7IrubBS","tlshash":"a762b9dc9b71afc5f30769f64aa2e1b8881d51ea8fdb4dca9c01bd821c0080e5a716f5","first_seen":"2026-02-03T09:17:27.70612Z","last_seen":"2026-06-19T09:33:33.202817Z","times_seen":96,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/logo.d4074e4e6876606e10e1.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.111Z","timestamp":1781861576111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/logo.d4074e4e6876606e10e1.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4y2PQ6BuPX60TmaOogeElt8A89QNmYJBPtMiiFjjWukwI8OlRAQuqMo0s%2Fo9eO%2Fq1fxlN%2B8zuqQNAKpH%2B%2BOslWk7lVD4EQ2hAnrKqzbw24Oew2F3Y743nMOLiAYO%2FdpPeqJ1%2BqM%3D\"}]}\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-2f45\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 12101\r\ncf-ray: a0e18782bdf71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12101,"size_decoded":12870,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"70b3344ffcb4f46fd09aaf286524c8ac","sha1":"b44d719f197f444cd1fa53a1f2429aba7ce1fe81","sha256":"03fae304728b9bd30b3265c3477e434aef559990f3ea2d00cb23aa59acf2027b","sha512":"01b41270fd096edc8f670002e0ea76d4af18435a4cf78382caa3242fe5ae5411a7948efaf39c34cd06a67dde709921056e1996a412989d5be8f5ec2d7765c4a7","ssdeep":"192:qSCN/Jy7nIvOKzH+eBo/qPmpqLSL5lcA/W/4pci3Ba56skTsbJelmD0+gnccjmEU:lw/czaOeH+eGAmp9LPcA/WQpciUkTE/9","tlshash":"6f42ae74e3e47ad4123ec668c2591e6a34d53831b31716a6ea2b3732b70d021f7c6e23","first_seen":"2025-11-18T23:24:37.818973Z","last_seen":"2026-06-19T09:33:33.203649Z","times_seen":102,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchange.trxdr.com/img/usdt.png","fqdn":"exchange.trxdr.com","domain":"trxdr.com","tld":"com"},"ip":{"addr":"104.21.8.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchange.trxdr.com/","date":"2026-06-19T09:32:56.115Z","timestamp":1781861576115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trxdr.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 19:23:42 GMT","end":"Sat, 29 Aug 2026 19:23:41 GMT"},"fingerprint":{"sha1":"97:6F:23:AA:6F:52:DE:CF:C9:00:40:78:AB:DB:46:63:EB:BD:EA:B3","sha256":"B4:DF:88:0C:46:69:02:8B:C8:AA:D8:39:71:C4:1F:F7:5E:A6:3F:23:2A:EC:58:93:1C:E6:45:23:A5:21:7F:61"}}},"request":{"raw":"GET /img/usdt.png HTTP/1.1\r\nHost: exchange.trxdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://exchange.trxdr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 19 Jun 2026 09:32:56 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\nlast-modified: Tue, 02 Jun 2026 15:06:20 GMT\r\netag: \"6a1ef16c-1ea2\"\r\nexpires: Fri, 26 Jun 2026 09:32:56 GMT\r\ncache-control: max-age=604800, public, max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3uhpkVosT3RQIeDL6OF3URypkWSBwKM%2FZ5w9leVT06xhg5DwGhcgV%2BPvFGkNUMKxMCp79jwWdbKCvy4H65ZZviXSMchMSN6PhkiX5Li0jocbWM27lINLuEIx1%2FhKvHSftinJYw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 7842\r\ncf-ray: a0e18782bdfa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7842,"size_decoded":8602,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8418a9e2231e14be024341a848802f26","sha1":"5dcda7dde375e4ba7c3403dc183b33845b067687","sha256":"014a5b538f2ff188725402119ceb6d62b3b1bb74c41c8445e0e6f7505c884505","sha512":"7c156570fb28d5e9ac77fd6b273a9553397f5a7db4ecc425ca60ea2fe343094b2080966023404391eba87213a7f1786f507f29f1cef62784cba1c3118ac8a418","ssdeep":"192:CS3ykn0gqSjhV1K6JiVoL4YATFeEc2Nawr+CY:dBn0gqSjtYKL4YWFedmfJY","tlshash":"2df19d28a6d42800a70da666b1ac04e34a6f96d886d0c6ae7ccfdc438df61f9c94d390","first_seen":"2025-06-26T16:07:51.28824Z","last_seen":"2026-06-19T09:33:33.206709Z","times_seen":152,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-19","alert":"Sinkholed","trigger":"exchange.trxdr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}