{"report_id":"24074ef6-6736-41c4-8213-8b111ef75882","version":6,"status":"done","tags":[],"date":"2026-02-13T23:02:03Z","url":{"schema":"https","addr":"changely.cfd/","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"changely.cfd/en/?email=","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"title":"Cryptocurrency Exchange - Crypto \u0026 Altcoin Swap Platform with Lowest Fees","dom":{"size":617836,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3001)","md5":"b557bb0ada2870e94704a9bebefec9ab","sha1":"0e3730f4a1fa67ec35ce2c3cb96384bc17174e96","sha256":"24bb96bdacc35e0ff0e3761828c4799d38f49f9668a6cb621ada0381dae159ae","sha512":"0c2d36181d435387e2b0d6782fe3202b18f4ca1ee496b064100c8356a418570ac1f2446ab85ca05852d0df13aef5735462d055fdd890aafb621a02b1ad147501","ssdeep":"6144:j1FFyEbBsiyi4L16C4T9QUyjiReNlV/Ezw1nGXu1cq7xlponWcIHlwe3+cIb9pTp:FEFPb6D0mw8R9/","tlshash":"83d4d6a915f81c7e4c4362d2bf417a4652ec92cbd21a8c9bb7eccbc11bd2ee64527314","dom_hash":"domhashaff9b96565e2c76b3fc97ad14582e571","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"changely.cfd/","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":0,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T23:02:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"changelly.com","ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-12-26","domain_rank":23785,"first_seen":"2017-02-01T06:42:30Z","last_seen":"2026-02-09T23:38:22.634651Z","alert_count":0,"request_count":17,"received_data":114880,"sent_data":11917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"changely.cfd","ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"domain_registered":"2026-01-16","domain_rank":0,"first_seen":"2026-02-13T13:22:55.345854Z","last_seen":"2026-02-13T13:22:55.345854Z","alert_count":50,"request_count":50,"received_data":4014897,"sent_data":26023,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"static.simpleswap.io","ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"domain_registered":"2018-04-10","domain_rank":1529096,"first_seen":"2022-03-15T18:27:07Z","last_seen":"2026-02-11T19:24:55.104023Z","alert_count":0,"request_count":9,"received_data":10120,"sent_data":4098,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.changelly.com","ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-12-26","domain_rank":0,"first_seen":"2025-01-04T08:32:44.629772Z","last_seen":"2026-02-13T13:15:10.419331Z","alert_count":0,"request_count":16,"received_data":39924,"sent_data":9444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"icons.veryicon.com","ip":{"addr":"172.67.165.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-07-31","domain_rank":2853322,"first_seen":"2016-05-31T15:09:21Z","last_seen":"2026-02-11T03:02:55.836693Z","alert_count":0,"request_count":1,"received_data":20940,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"web-assets","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-05-19T02:54:14.762782Z","last_seen":"2026-02-13T13:42:41.523011Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":458,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"changely.cfd/en/?email=","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c490eddea63dfa553b8d925ddc90aa3b","sha1":"15a157e6bcf056e05729c4301c299635ad0824fa","sha256":"46af57e2debd67b797bb2b5f9c5de0c7f9d7ed216e964754ce45e37453fed6e2","sha512":"e02c0bc670f43edcabd8e6de81fd113adf19364d61e81e1b711cbe269681128821ba77c1882734443992cd3df1e31acb79284e0f87dbbc92dfa3f175c8eb5279","ssdeep":"","tlshash":"a8515c6b76a9193415df37fe629887893930c1075c019a197f3c0bea2f90c52d8f7ba5","size":2477,"data":"","first_seen":"2026-02-03T10:12:37.953666Z","last_seen":"2026-04-13T00:20:37.32817Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/?email=","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"45b84b2425f45692663f17cfa29bdf0a","sha1":"963e7578716730c6a85fa092c70cc8d8a95415bb","sha256":"dd426056c40b262016a34719c7e30690b50b36554a010acee90246160d66cf00","sha512":"791b420b2ab4adfb7e3dc2a081f0e4220250de50934dc919dac900c0deb17e46b17cfeedc690fcee4a828b732e42b7abac2bf03f3edf03d1ec976b9a603edead","ssdeep":"","tlshash":"1e41a7ab7ba70a301bcfa62b67a4af853530400b5e0599093f7c0ae04f25d8774f96d4","size":1889,"data":"","first_seen":"2025-11-18T09:10:19.364838Z","last_seen":"2026-04-13T00:20:37.328789Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/?email=","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"710fa639e890428c9fde38e1f5f5b00d","sha1":"a77289dc3bd95c85a76cf3802e54826fbb2387c2","sha256":"29d78360c172c23af2c51096e01c167b7b3a32c591c8188da8f7c3307dd28fdc","sha512":"8e40f0932f35814c64abaa6fb940991418fd550438e6c99bc84138782797fa2b8f282b36892165b8c45c795b47f08623b53c85f60d72d31779665a525ca07e32","ssdeep":"6144:PReNlV/Ezw1nGXu1cq7xlponWcIHlwe3+cIb9pTeF5J+j49RbEbDd9nrTPuAD0Su:kFPb6D0mw8R90","tlshash":"b954328e18b95cbd8c0331d2af42768252ec01cb965a5c67bbeccfd517e1beb0269315","size":299053,"data":"","first_seen":"2026-02-13T23:02:10.584748Z","last_seen":"2026-02-13T23:02:19.453044Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c490eddea63dfa553b8d925ddc90aa3b","sha1":"15a157e6bcf056e05729c4301c299635ad0824fa","sha256":"46af57e2debd67b797bb2b5f9c5de0c7f9d7ed216e964754ce45e37453fed6e2","sha512":"e02c0bc670f43edcabd8e6de81fd113adf19364d61e81e1b711cbe269681128821ba77c1882734443992cd3df1e31acb79284e0f87dbbc92dfa3f175c8eb5279","ssdeep":"","tlshash":"a8515c6b76a9193415df37fe629887893930c1075c019a197f3c0bea2f90c52d8f7ba5","size":2477,"data":"","first_seen":"2026-02-03T10:12:37.953666Z","last_seen":"2026-04-13T00:20:37.32817Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"45b84b2425f45692663f17cfa29bdf0a","sha1":"963e7578716730c6a85fa092c70cc8d8a95415bb","sha256":"dd426056c40b262016a34719c7e30690b50b36554a010acee90246160d66cf00","sha512":"791b420b2ab4adfb7e3dc2a081f0e4220250de50934dc919dac900c0deb17e46b17cfeedc690fcee4a828b732e42b7abac2bf03f3edf03d1ec976b9a603edead","ssdeep":"","tlshash":"1e41a7ab7ba70a301bcfa62b67a4af853530400b5e0599093f7c0ae04f25d8774f96d4","size":1889,"data":"","first_seen":"2025-11-18T09:10:19.364838Z","last_seen":"2026-04-13T00:20:37.328789Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"710fa639e890428c9fde38e1f5f5b00d","sha1":"a77289dc3bd95c85a76cf3802e54826fbb2387c2","sha256":"29d78360c172c23af2c51096e01c167b7b3a32c591c8188da8f7c3307dd28fdc","sha512":"8e40f0932f35814c64abaa6fb940991418fd550438e6c99bc84138782797fa2b8f282b36892165b8c45c795b47f08623b53c85f60d72d31779665a525ca07e32","ssdeep":"6144:PReNlV/Ezw1nGXu1cq7xlponWcIHlwe3+cIb9pTeF5J+j49RbEbDd9nrTPuAD0Su:kFPb6D0mw8R90","tlshash":"b954328e18b95cbd8c0331d2af42768252ec01cb965a5c67bbeccfd517e1beb0269315","size":299053,"data":"","first_seen":"2026-02-13T23:02:10.584748Z","last_seen":"2026-02-13T23:02:19.453044Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"web-assets/_next/static/media/white-man.88107a67.svg","fqdn":"web-assets","domain":"web-assets","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.962Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/white-man.88107a67.svg HTTP/1.1\r\nHost: web-assets\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/33aef96f826b6f2a.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/33aef96f826b6f2a.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-source-app: legacy-pod\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 11 Dec 2025 13:00:54 GMT\r\netag: W/\"97a-19b0d800b70\"\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 5565277\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U0Hbulk0myrD6%2FlE1e6G97odVcaWisntRoVSW8qThoxzTwQQsuCQtNGlwu3oEW5dzDXH%2Fh8BPhwJgw1t7z1hvWCfkOZl6VaG9OdSSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f2c55a74c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2426), with no line terminators","md5":"d8d2ff19237e4aad47a659230b0e4129","sha1":"018e4e1f040827abf21911a13430d3403885e434","sha256":"1754a9a210c12fd3b17e86b5013db1254dc08d2faf84b63e2bb1bf5bdbf78ed2","sha512":"c6b3a8feaa3ffc1d5a9fa05ff8dd0165c6166db95edfff963a70e891d8e592bc3a1802568f5c6e7fa62025e81fdd8bae1ab92a1d8f14f8bb22ef164e3f19aca2","ssdeep":"","tlshash":"17410f335270712db42ba7785791458d2068d01aaf1f53e9ed22b639a1ce29339712ee","first_seen":"2025-11-18T09:10:19.319982Z","last_seen":"2026-04-13T00:20:37.315807Z","times_seen":19,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":23,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/33aef96f826b6f2a.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/33aef96f826b6f2a.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023702859\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-source-app: legacy-pod\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 11 Dec 2025 13:00:54 GMT\r\netag: W/\"97a-19b0d800b70\"\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 5565288\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZflTX0yM1ObkGs6%2BvnhnRVmGAQWe0jL16d5C5N1f%2FpeouYjdwHfYavu8gCwd7VbsNQ%2FXuD9FinYJqCAg3XQpS3ybqucCEdY04fe8Kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30a0990c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2426), with no line terminators","md5":"d8d2ff19237e4aad47a659230b0e4129","sha1":"018e4e1f040827abf21911a13430d3403885e434","sha256":"1754a9a210c12fd3b17e86b5013db1254dc08d2faf84b63e2bb1bf5bdbf78ed2","sha512":"c6b3a8feaa3ffc1d5a9fa05ff8dd0165c6166db95edfff963a70e891d8e592bc3a1802568f5c6e7fa62025e81fdd8bae1ab92a1d8f14f8bb22ef164e3f19aca2","ssdeep":"","tlshash":"17410f335270712db42ba7785791458d2068d01aaf1f53e9ed22b639a1ce29339712ee","first_seen":"2025-11-18T09:10:19.319982Z","last_seen":"2026-04-13T00:20:37.315807Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/e238ce73aefa78fc.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/e238ce73aefa78fc.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023693693\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:36 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:43:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUMc0JceL3QcBiJns%2BxLtyQ9puCHHOpPJVzLoEq4Ov9nWFquTAY4cOxbKlgqaSn16N%2B8uOxbteYOZBg9dvhc%2BCSN91uqf9Q8AUtYVw%3D%3D\"}]}\r\nexpires: Fri, 27 Nov 2026 12:44:00 GMT\r\ncache-control: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6776118\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"691b0a62-5075\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f2d6fc19c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20597), with no line terminators","md5":"b32be7857d58e4d3a7b8a71f72de3529","sha1":"6a3c35671500bf1c7e8a6302b91407efddab9248","sha256":"21bbb6b368fd1cc7d605502985336465e090c005285b4ca197f9098f9381b34d","sha512":"f31722d05d1773d39e2f5028a845c3806b8f021c04c134e29302c355496727c74e008a0068e5b8e58fabcfbd1d77557abd1b4b718d7cc84153475cab38e98e5a","ssdeep":"384:jmhh0l3vBclnJ0Rxm/lROnjVJXCD/DtBgn:jPBdSlROnBJXy7jQ","tlshash":"2292753395203569b4239b6973d985983028c5459f335bfbed729a38c2ca1e236633bd","first_seen":"2025-11-18T09:10:19.331053Z","last_seen":"2026-04-13T00:20:37.309735Z","times_seen":21,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/6533603c383bfb3a.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/6533603c383bfb3a.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:22:02 GMT\r\nETag: \"46a-6423563016680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 454\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1130), with no line terminators","md5":"d34580e7e5ecdf9c47bfbf69dc3139c8","sha1":"6d023eaa4695d81d969490809e0accde99283774","sha256":"e9a4471116369634c0983a52f775bdfc93cd48d2ca26bf9287a6bb84dc776bd3","sha512":"35d742dab10045547ec9ece767a7c86425c1f053a5bd5a91ef07eac50e69916f0db5e907061034daaaa652dcc8b0faced47e3fdcc33852c30b36c04cd587608f","ssdeep":"","tlshash":"fd219ee17031d8bdfbb6103a454c97de3073d155e91b56ed8609b196438a2fac92093f","first_seen":"2025-11-18T09:10:19.326913Z","last_seen":"2026-04-13T00:20:37.311592Z","times_seen":23,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:36 GMT\r\ncontent-type: application/xml\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\nx-amz-request-id: 1893F0AB2E097932\r\ncontent-security-policy: block-all-mixed-content\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/image?url=%2Fweb-assets%2F_next%2Fstatic%2Fmedia%2Fbonus-50.bc83b5fc.png\u0026w=64\u0026q=100","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/image?url=%2Fweb-assets%2F_next%2Fstatic%2Fmedia%2Fbonus-50.bc83b5fc.png\u0026w=64\u0026q=100 HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2984\r\nserver: cloudflare\r\nx-source-app: web\r\nreporting-endpoints: csp-endpoint=\"https://sentry-new.changelly.com/api/8/security/?sentry_key=8c37a8b3397241d19f5cff8a124c9d00\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nvary: Accept, accept-encoding\r\ncache-control: public, max-age=31536000, must-revalidate\r\netag: cuYluOQnfD9nAoqcX+jHFJHOGjmlwWHUGhiSj2L6CaQ=\r\ncontent-disposition: inline; filename=\"bonus-50.webp\"\r\nx-nextjs-cache: MISS\r\naccept-ranges: bytes\r\nage: 4832063\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdVegxF4ucnQpqFjBHXnEC3r8m9GUm%2FO%2BJBgpMQ2BJ8q1QF2PVHT%2BawjLUncSdDJFaIRYG3z0e8NymviZitx2P8UAMcdovBDzd995g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30bcc96c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2984,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d3dbec873e33eb4a8d15581ce0ac041","sha1":"1a57d1e49dc1ba457ddae7471ba18ca776e0202a","sha256":"72e625b8e4277c3f67028a9c5fe8c71491ce1a39a5c161d41a18928f62fa09a4","sha512":"e057698ccc1032fa44282ea5f69a2ed900560efa0b749562636a21d0a0808464b140f2ad115e46c19e691eed8f2f9c2f8f6a258f5e66e098f02da0649156fdee","ssdeep":"","tlshash":"87512c5521bd8e188ea0fac0dbc67a1eb9084abcc1b98f0c2577f72805710a5f0d5ab2","first_seen":"2025-11-18T09:10:19.361086Z","last_seen":"2026-03-04T08:53:03.31417Z","times_seen":11,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/562eb40cb77cf3ef.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/562eb40cb77cf3ef.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:21:04 GMT\r\nETag: \"8b6-642355f8c6400-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 495\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2230,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2230), with no line terminators","md5":"4247d02cd7a496f3e1e37931a6ef2759","sha1":"c2c50395ac3ee485ae14876ed5ddf10d8783dddc","sha256":"703d2ce549592f63e9025ec565f3ecac9f9f0cea95f39ff49e32391020845eb9","sha512":"50bf4d8f29826993c05ed1d26f410e55dcf75881627d51ec474b768cc22cdc33c8e069f898fe23d5d677f0df7a5e6c94b7559445cb9ab87db8afefe68f17448a","ssdeep":"","tlshash":"4241f7e885a4094e23c30317cecd7e68a63d9dcb51245cbd7326129b4a8e3c9236f977","first_seen":"2025-11-18T09:10:19.342538Z","last_seen":"2026-04-13T00:20:37.321463Z","times_seen":21,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/api/?id=1\u0026from=btc\u0026to=eth\u0026amountFrom=0.1\u0026isFixed=false","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /api/?id=1\u0026from=btc\u0026to=eth\u0026amountFrom=0.1\u0026isFixed=false HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/?email=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/a8489eed8bd9e5a6.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/a8489eed8bd9e5a6.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:26 GMT\r\nETag: \"2123-642355d488e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1308\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8483,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8483), with no line terminators","md5":"635e1dfdf14ef4ce5f8dcf8539ce7964","sha1":"102a6695c8d1462ec480d0abc368effe774d1b1f","sha256":"5c1956c247457f31620cf4cee2b9c424d118a6888155ab577420b6a48a1ac343","sha512":"c81e07ba44a68c2f18547662e1f5549ba52c3c53be1a515bacf02a76609d9e8a1db47e3a9466dc533995810721e488e62bfa56c29f62b45b0998a6fd1fe5aac5","ssdeep":"192:q3txBPh+gYvqxCVlDEJYJqx5u+crJY8qxsv/paJYQTo9:wHW82Ot1cQTY","tlshash":"e002ab20801e909ed576bcd332c93f232979541196d04d1aef6c89a8dedbc7733d5b68","first_seen":"2025-11-18T09:10:19.299826Z","last_seen":"2026-04-13T00:20:37.32037Z","times_seen":26,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":67,"dns":1,"connect":29,"send":0,"wait":25,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/xlm.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/xlm.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1350\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-66c\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 03:18:03 GMT\r\ncache-control: max-age=86400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1644\r\npriority: u=4;i=?0,cf-chb=(61;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 71010\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7MbsAPDKIPrk%2FNPoBZqpYphrNv5L9McRyyUCf14WNaTOSvGk0gyBv3qaf7Jo9g8PsVPCt2nk01HwI39Iz57PJDaiPpA5UAwiwtEXL313es%3D\"}]}\r\ncf-ray: 9cd7f2c6cd05c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced","md5":"ae3f1d78e0113a6f0f9599ace99a9ab3","sha1":"83d79433675375c47e008544366aba8dbf2c4071","sha256":"09a6ecf4e2d571340c1a20376e10a5f234230061fc97aa70801feefe5032dacb","sha512":"efcb6d65b517d9af28f9de6e3bc1da7eca8a9fbb8854423cf62241b2d408a7a086b6f75b3743855d28758eaed0afdb415c21d687a61a23b3e05df4302fcadcd5","ssdeep":"","tlshash":"01210bb35dde97e4c5440e05b3b37c7364594e3948171602ee3abe1c021f035d105ec4","first_seen":"2025-11-18T09:10:19.346557Z","last_seen":"2026-04-13T00:20:37.307168Z","times_seen":21,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":281,"dns":0,"connect":9,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 07 Oct 2025 16:58:06 GMT\r\nETag: \"6000-6409478c86380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 24576\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-07-24T20:14:11.932046Z","times_seen":10421,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: application/xml\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\ncontent-security-policy: block-all-mixed-content\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1893F0AA8B08429B\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/1cb0eb1d00b26a4e.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/1cb0eb1d00b26a4e.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:32 GMT\r\nETag: \"13795-642355da41c00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15327\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":79765,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65470)","md5":"d3653f78cb0765fce7411e1a510e9769","sha1":"a15dde6aac2aafbc243520178486aac6be7cf7eb","sha256":"8517167c6c714b0ee44a0abd7ff2f764af1387e06407a6faa5670a9fca5ca623","sha512":"e1c6c0847a36b79284591b466a62fa744a450a86ebdbda17118bd49623ba6ae389741b6328ff7605d9ff3f9b1aa60a196f6109201b34c5092538818a6d089ee7","ssdeep":"1536:H5Xs4h3kRfTL8Foku+D+FC/KxOoL3tB4vMrE1gNi8Ih1hXhY7CE659nX9/R18dA9:H5Xs4h3kRfTL8Foku+D+FC6brE1gNi8o","tlshash":"6373a6affb12117e6c3781b1c294bbec711af541df2216fafa2265214dc17f10e69628","first_seen":"2025-11-18T09:10:19.336227Z","last_seen":"2026-04-13T00:20:37.32094Z","times_seen":21,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/1cb0eb1d00b26a4e.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:39.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/1cb0eb1d00b26a4e.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:39 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:32 GMT\r\nETag: \"13795-642355da41c00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15327\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":79765,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65470)","md5":"d3653f78cb0765fce7411e1a510e9769","sha1":"a15dde6aac2aafbc243520178486aac6be7cf7eb","sha256":"8517167c6c714b0ee44a0abd7ff2f764af1387e06407a6faa5670a9fca5ca623","sha512":"e1c6c0847a36b79284591b466a62fa744a450a86ebdbda17118bd49623ba6ae389741b6328ff7605d9ff3f9b1aa60a196f6109201b34c5092538818a6d089ee7","ssdeep":"1536:H5Xs4h3kRfTL8Foku+D+FC/KxOoL3tB4vMrE1gNi8Ih1hXhY7CE659nX9/R18dA9:H5Xs4h3kRfTL8Foku+D+FC6brE1gNi8o","tlshash":"6373a6affb12117e6c3781b1c294bbec711af541df2216fafa2265214dc17f10e69628","first_seen":"2025-11-18T09:10:19.336227Z","last_seen":"2026-04-13T00:20:37.32094Z","times_seen":21,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/cec98bae3d0043e9.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/cec98bae3d0043e9.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:42 GMT\r\nETag: \"1179-642355e3cb280-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1180\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4473,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4473), with no line terminators","md5":"0e1cb4563c01b879df922ac731f343d1","sha1":"55c81f3789e6603618985eba5d4448452a151cbe","sha256":"c3b636d825c584be8a600e25e9979202a3a38b0d7cbec3abc3c50beb90e27e17","sha512":"897325e8f562304455201dc7d9d74cd2f8ffc03d7ba538932a2f9c826b7ab3a7d6ec16166876e11ce13f3d9fb770545736c15f5509bebf7775ba57bae4d0eb63","ssdeep":"96:wmqHJFAQ8QaNXVyTeu03gLyTUZJNeMquVyPPCxrya03sE:EHJFDpaFVBu0QEmJNOuVVd03sE","tlshash":"a191a965f189617b132bc1bc8841fa23b388b549db641fe77f628054b68c6c32fc9663","first_seen":"2025-11-18T09:10:19.318225Z","last_seen":"2026-04-13T00:20:37.32679Z","times_seen":21,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/favicons/apple-touch-icon.png?v=2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:45.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /favicons/apple-touch-icon.png?v=2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:45 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 01 Nov 2025 10:39:40 GMT\r\nETag: \"990-64286196eb300\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2448\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"51120a3ad49678b13fc902c89575257f","sha1":"53beca436fca85e511c0cb1b06c0ee615597651e","sha256":"db00eb797f93d5568395a8c66da4b027a62fe802d2353769fbc843b10e3f83f0","sha512":"b8ff944465b0102cf4048977ebe8a810b8107408a58e91490a953bc9be982715821be77000125d91e723bf6f77bbfad9474f34fe1c883241c74bcd07120201b5","ssdeep":"","tlshash":"ca510b1957cc3c6d3fe115e6f21c04f328e61653fef8055d11a6c66d20f112907ee825","first_seen":"2025-11-18T09:10:19.348098Z","last_seen":"2026-06-19T05:49:17.015473Z","times_seen":29,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/a8489eed8bd9e5a6.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:39.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/a8489eed8bd9e5a6.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:39 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:26 GMT\r\nETag: \"2123-642355d488e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1308\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8483,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8483), with no line terminators","md5":"635e1dfdf14ef4ce5f8dcf8539ce7964","sha1":"102a6695c8d1462ec480d0abc368effe774d1b1f","sha256":"5c1956c247457f31620cf4cee2b9c424d118a6888155ab577420b6a48a1ac343","sha512":"c81e07ba44a68c2f18547662e1f5549ba52c3c53be1a515bacf02a76609d9e8a1db47e3a9466dc533995810721e488e62bfa56c29f62b45b0998a6fd1fe5aac5","ssdeep":"192:q3txBPh+gYvqxCVlDEJYJqx5u+crJY8qxsv/paJYQTo9:wHW82Ot1cQTY","tlshash":"e002ab20801e909ed576bcd332c93f232979541196d04d1aef6c89a8dedbc7733d5b68","first_seen":"2025-11-18T09:10:19.299826Z","last_seen":"2026-04-13T00:20:37.32037Z","times_seen":26,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/6533603c383bfb3a.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/6533603c383bfb3a.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:22:02 GMT\r\nETag: \"46a-6423563016680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 454\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1130), with no line terminators","md5":"d34580e7e5ecdf9c47bfbf69dc3139c8","sha1":"6d023eaa4695d81d969490809e0accde99283774","sha256":"e9a4471116369634c0983a52f775bdfc93cd48d2ca26bf9287a6bb84dc776bd3","sha512":"35d742dab10045547ec9ece767a7c86425c1f053a5bd5a91ef07eac50e69916f0db5e907061034daaaa652dcc8b0faced47e3fdcc33852c30b36c04cd587608f","ssdeep":"","tlshash":"fd219ee17031d8bdfbb6103a454c97de3073d155e91b56ed8609b196438a2fac92093f","first_seen":"2025-11-18T09:10:19.326913Z","last_seen":"2026-04-13T00:20:37.311592Z","times_seen":23,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/usdtrx.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/usdtrx.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1240\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-a6d\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 04:29:03 GMT\r\ncache-control: max-age=86400\r\ncf-polished: ok, orig_size=2669\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 286;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 66761\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=538T5a84oZhLv%2F%2Bqp%2BP3MPMN2Iiyd%2B1JK145isw8mbcPIJeaHf8NSbiztchhKHtDFkRz6ozfn2XwSY61wj1apxUFiLNXK4lms3PvTWf6XS0%3D\"}]}\r\ncf-ray: 9cd7f30acad7c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"00902f51e686f522e3c15dcdcb5b9058","sha1":"8090c36521dbb61fc99259b482b7a38273507e50","sha256":"844f4263b7de02ee383226aac763afe148d37549fb0438d2ab1a76abae37851d","sha512":"991989734fcc73ab1fd178b072b7e0cccb9ed38ca95b26b88159498fab7c53ae98db0d17c5a5411dac08c90306182033f3a1cce29d7cc1354f98a0e69cd55551","ssdeep":"","tlshash":"e221e78e457878b18a181f2b8a8f3344feab0a621d253b227c0900697e212d3fac71c0","first_seen":"2025-11-18T09:10:19.296271Z","last_seen":"2026-05-09T23:57:36.688813Z","times_seen":23,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/1979520c3bd20e33.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/1979520c3bd20e33.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:56 GMT\r\nETag: \"1f2f-642355f125200-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2232\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7983,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7983), with no line terminators","md5":"686cf197e7ed04ae2ab6f58932197a9c","sha1":"8e372a758eaca7aed6bb232315d2202b5bbb4302","sha256":"ed3519ceb78184ce20ce268d16fb0a98a71a375e47c68bc1509275834f2e7570","sha512":"f2bd7b9475165810799100c0680aba4dff712db83629a0a3c8f39888401e15f69586715486cc33061e3a5004de69fbc9401c6b2f2a4cef072ed87cd5ff9271a5","ssdeep":"192:IdYtZggPd294Vt1cr9RasxdqzYrFjHYhzRRi:6Od294V498Wd6IxHcTi","tlshash":"a6f172b87d2190f9d833641a3bd9a0881122d6d9ad2b0ffe7589611c43d26e17762f3f","first_seen":"2025-11-18T09:10:19.305478Z","last_seen":"2026-04-13T00:20:37.310843Z","times_seen":21,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":188,"dns":1,"connect":103,"send":0,"wait":103,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/2772de317f07e534-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/2772de317f07e534-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 07 Oct 2025 16:58:04 GMT\r\nETag: \"3fd0-6409478a9df00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16336\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16336, version 1.0","md5":"c9799d10d2244c347708a80194156669","sha1":"365833cc5bc967e58537294063574fcdd8bce526","sha256":"c26c8b74d570cc06f9790b21bc4a81c86ebbc63809c1ccd6f0a3d1e86fc68565","sha512":"bf28534767bb39794f03dc146db2d482ccc42e84b576da7c563f5aee135172e05404da681c71cfc9ec346ad1c0317ccc9314116a07476e65f92e8cdfa993ae9b","ssdeep":"384:1iYFevfys/a9G1M9w8lrmbchJtz5sI+99Rwyci:1iYkSdG+VJttXMz","tlshash":"4f72c06980081b81bc761a73a373756e641e7b6bce196d2164073d0fbb30c58dda8b9e","first_seen":"2025-09-07T20:05:59.477196Z","last_seen":"2026-07-21T23:20:07.117049Z","times_seen":309,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/6b49df2ed055265f.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/6b49df2ed055265f.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:18:44 GMT\r\nETag: \"482-6423557342900-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 427\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1154), with no line terminators","md5":"8b8554d88732910aaadd633af363554d","sha1":"3f8d41f6efa0775e215fc6ba03885b61a189c3a2","sha256":"50a89f43ca5b300d89d61b21d6e7988005246d3041a5c32cef353526a25d9484","sha512":"51bcc2cd74fbc4792fcd30d3935fab1b6fc6822d1abe8949c3d2a3159cb3019474d73b87bed4a49e1603544b8677d34b5cd1a4ab39b3c538a11bca6c4a542203","ssdeep":"","tlshash":"2621d7216070489c37ad215dcfce54e61c689446247c58287b7f809b38c92e99bbdd22","first_seen":"2025-09-09T19:03:18.444669Z","last_seen":"2026-04-13T00:20:37.321989Z","times_seen":27,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/e238ce73aefa78fc.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/e238ce73aefa78fc.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:43:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0CD9PeX1OpgKbRCyV4DE7BxWjidmvr10B0QFF5Q991ctIM8rz1tdk0tZoRI1RlT%2FZfG0LEkWnVHLFHI4zoWrNsnSBdAFGP%2F76etDNg%3D%3D\"}]}\r\nexpires: Fri, 27 Nov 2026 12:44:00 GMT\r\ncache-control: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6776115\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"691b0a62-5075\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f2c55a87c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20597), with no line terminators","md5":"b32be7857d58e4d3a7b8a71f72de3529","sha1":"6a3c35671500bf1c7e8a6302b91407efddab9248","sha256":"21bbb6b368fd1cc7d605502985336465e090c005285b4ca197f9098f9381b34d","sha512":"f31722d05d1773d39e2f5028a845c3806b8f021c04c134e29302c355496727c74e008a0068e5b8e58fabcfbd1d77557abd1b4b718d7cc84153475cab38e98e5a","ssdeep":"384:jmhh0l3vBclnJ0Rxm/lROnjVJXCD/DtBgn:jPBdSlROnBJXy7jQ","tlshash":"2292753395203569b4239b6973d985983028c5459f335bfbed729a38c2ca1e236633bd","first_seen":"2025-11-18T09:10:19.331053Z","last_seen":"2026-04-13T00:20:37.309735Z","times_seen":21,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":1,"connect":28,"send":0,"wait":18,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/sol.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/sol.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 3398\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-f9b\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 11:24:21 GMT\r\ncache-control: max-age=86400\r\ncf-polished: ok, orig_size=3995\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(74;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 41843\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Os20VIoNzi%2Fwy0T36u6yA%2FvfFf74dCwSkaWSy8cgtkC3c2AXb%2F2GRnchpZhrb3%2FnMXmcIhPhiMeH069JjBxYuiwvwEZ86A4iWX%2BzSpK9b3M%3D\"}]}\r\ncf-ray: 9cd7f30a9a5dc124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"d98d6cf795fa37bb5dcb88214acabf85","sha1":"e5637ac825a2271a8ad14d65b2e76f24b07e4297","sha256":"c29039e1fb3d5f643e5a525ae0b520aff96700bb3e2829a5a086c66a67ea296e","sha512":"f1a35b126e0808957a64add75be94774262d1fa8a63d39662b2e2b10dd4cb5e68712007a579d103005336eb7b1fb691d2972a89ed6f1e1963761b6618b01b5bc","ssdeep":"","tlshash":"3a617c2891206b27983e53cb6e4b6530cedf36ca8b30e9ae519269101e7d890233724f","first_seen":"2025-11-03T18:07:18.060913Z","last_seen":"2026-05-09T23:57:36.604477Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/web-assets/_next/static/media/tangem.67d684ae.svg","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /web-assets/_next/static/media/tangem.67d684ae.svg HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-source-app: web\r\nreporting-endpoints: csp-endpoint=\"https://sentry-new.changelly.com/api/8/security/?sentry_key=8c37a8b3397241d19f5cff8a124c9d00\"\r\ncontent-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' changelly.com *.changelly.com *.gist.build *.google.com *.hotjar.io *.hotjar.com *.linkedin.com https://connect.facebook.net https://snap.licdn.com *.livechatinc.com *.sumsub.com www.gstatic.com cloudflare.com https://challenges.cloudflare.com *.customer.io *.customerioforms.com *.google-analytics.com *.livechat.com *.livechat-static.com; worker-src 'self' blob:; report-to csp-endpoint;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 25 Dec 2025 13:44:35 GMT\r\netag: W/\"9a7-19b55c111b8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 4315681\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJqmdOIMt36ModQNdGjsYPT59FuNuIKjtNy7O4jv5nVPBlxcv9osAgh3alQS%2B%2BR1etcUGNFgECTLnpqhffWX1pOWSd%2FbPGvWUzbksA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30bbc78c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2471,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eeb7a2631b3e64a2c0a0e4079ae26d30","sha1":"e47ebc611d2cd27c927edbd2fd1a40ddb693f10c","sha256":"b9acf6913b473a25aeb2fa51ac151181b8f59f5520a5b6daffdc7a063706e4fb","sha512":"b84db3ba9940ad366b36ce915abbf881c8e0423f7fb69a48c5f99fefa04925cb27c29dafd19b08e2f654f5c88918a07b36f78e7d0b9f2652d16957ae1556e33d","ssdeep":"","tlshash":"855169eb9b20f44c8d579dbcdf1b595a3a9da5e6273b8060917fd5631ce1bf0a802d00","first_seen":"2025-06-16T12:39:09.083773Z","last_seen":"2026-04-13T00:20:37.323091Z","times_seen":25,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/web-assets/_next/static/media/ellipal.5009d07d.svg","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /web-assets/_next/static/media/ellipal.5009d07d.svg HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-source-app: web\r\nreporting-endpoints: csp-endpoint=\"https://sentry-new.changelly.com/api/8/security/?sentry_key=8c37a8b3397241d19f5cff8a124c9d00\"\r\ncontent-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' changelly.com *.changelly.com *.gist.build *.google.com *.hotjar.io *.hotjar.com *.linkedin.com https://connect.facebook.net https://snap.licdn.com *.livechatinc.com *.sumsub.com www.gstatic.com cloudflare.com https://challenges.cloudflare.com *.customer.io *.customerioforms.com *.google-analytics.com *.livechat.com *.livechat-static.com; worker-src 'self' blob:; report-to csp-endpoint;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 21 Jan 2026 12:48:58 GMT\r\netag: W/\"2e0b-19be099da90\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 1887955\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnmrxXEgrEZUMoF699Ehg0y65wx32eBAdssD8PslVV0lT%2BYv9y3U2RJOZ0uBk8TcSzE3CTFIsZjeiCFnaE%2BUEYI6Z7Xp0QIIh7Wjyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30bcc8fc124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11787,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88ef76b7d4ddeeb2605f34914fac40d9","sha1":"30ab2fa3e1f5b28339df66cb5ab0c9e000e7a349","sha256":"0c2ecc97dd0825ae7917d1210a390a4d437a1eb96e6b30f8a2790f64948e6fd1","sha512":"931d960138339537b815180d656a88c1071b19c224ac8d7ead7edf72f306e72dedbee2caf59207fce04e0f907135d7c28de4a508f602091685c0ee96deeade55","ssdeep":"192:y0GpdJUtBP8LC9rVJhKdCikNQ6ZOlSih/2giyDyyDkDr2m1fYBxOUoPkb:xGprYBPa8vN8ggiyDzUBYBIW","tlshash":"f03243c62270638cd8cba25edb6adcd4131e60afb57295c68e9fc79c540f9c4fb06864","first_seen":"2025-06-16T12:39:09.095984Z","last_seen":"2026-04-13T00:20:37.324238Z","times_seen":24,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/1cb0eb1d00b26a4e.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/1cb0eb1d00b26a4e.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:32 GMT\r\nETag: \"13795-642355da41c00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15327\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":79765,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65470)","md5":"d3653f78cb0765fce7411e1a510e9769","sha1":"a15dde6aac2aafbc243520178486aac6be7cf7eb","sha256":"8517167c6c714b0ee44a0abd7ff2f764af1387e06407a6faa5670a9fca5ca623","sha512":"e1c6c0847a36b79284591b466a62fa744a450a86ebdbda17118bd49623ba6ae389741b6328ff7605d9ff3f9b1aa60a196f6109201b34c5092538818a6d089ee7","ssdeep":"1536:H5Xs4h3kRfTL8Foku+D+FC/KxOoL3tB4vMrE1gNi8Ih1hXhY7CE659nX9/R18dA9:H5Xs4h3kRfTL8Foku+D+FC6brE1gNi8o","tlshash":"6373a6affb12117e6c3781b1c294bbec711af541df2216fafa2265214dc17f10e69628","first_seen":"2025-11-18T09:10:19.336227Z","last_seen":"2026-04-13T00:20:37.32094Z","times_seen":21,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":70,"dns":1,"connect":28,"send":0,"wait":27,"receive":23,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/usdtrx.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/usdtrx.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1240\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-a6d\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 04:29:03 GMT\r\ncache-control: max-age=86400\r\ncf-polished: ok, orig_size=2669\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 286;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 66750\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SXFeNRUnKtRvOiH4bIPtpSlGc0uhW9B9WYs%2BJmx8kjfxKLkFFmm12BYRk%2FARNlq65fwEUn8M1bK3gbds4b2qlBf0KM7rV6AkKhjwMpDnqI%3D\"}]}\r\ncf-ray: 9cd7f2c6cd0cc124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"00902f51e686f522e3c15dcdcb5b9058","sha1":"8090c36521dbb61fc99259b482b7a38273507e50","sha256":"844f4263b7de02ee383226aac763afe148d37549fb0438d2ab1a76abae37851d","sha512":"991989734fcc73ab1fd178b072b7e0cccb9ed38ca95b26b88159498fab7c53ae98db0d17c5a5411dac08c90306182033f3a1cce29d7cc1354f98a0e69cd55551","ssdeep":"","tlshash":"e221e78e457878b18a181f2b8a8f3344feab0a621d253b227c0900697e212d3fac71c0","first_seen":"2025-11-18T09:10:19.296271Z","last_seen":"2026-05-09T23:57:36.688813Z","times_seen":23,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":285,"dns":0,"connect":10,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/css/a8489eed8bd9e5a6.css\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 07 Oct 2025 16:58:06 GMT\r\nETag: \"6000-6409478c86380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 24576\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-07-24T20:14:11.932046Z","times_seen":10421,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:34 GMT\r\ncontent-type: application/xml\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\nx-amz-request-id: 1893F0AA9959B8B8\r\ncontent-security-policy: block-all-mixed-content\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/xrp.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/xrp.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1363\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-5b7\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 08:32:05 GMT\r\ncache-control: max-age=86400\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 476;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1463\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 52168\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHfzXCw%2B%2FAPZjObU0lUs3ztUJAWz%2Bobko3gt59v9SNV%2FTjGY8Y7OQJRl6d%2BN%2B9dxFbnz%2BkyXoiiySpDZznlxJJH0%2Ba1rPCKK2xlRAywYQrA%3D\"}]}\r\ncf-ray: 9cd7f2c6cd0bc124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"3d9a397913eaf6fb66da5b6c5ff3ef45","sha1":"a8b641de233e739e732791f52724a98dc9ce2cac","sha256":"f10e2553dc76102b5244421dee6d9eee7fc7e8fed8e6be1624f1cab6c5bf001e","sha512":"deaac3fd68dfc3510b6507a783746ab72dc0912f686005f5cc56a70fb17fafa8faf8f9289c685dd9dbf52022cc3c0ec3bf9d7bf301804cb337e64fd5c43f8ff4","ssdeep":"","tlshash":"f821d563c67c6c1c9c242e33b4713a7b8c132e5f9c40e580748971a892b8347a1d5ff9","first_seen":"2025-11-03T18:07:18.081296Z","last_seen":"2026-05-09T23:57:36.770097Z","times_seen":29,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":284,"dns":0,"connect":9,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/6533603c383bfb3a.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/6533603c383bfb3a.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:22:02 GMT\r\nETag: \"46a-6423563016680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 454\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1130), with no line terminators","md5":"d34580e7e5ecdf9c47bfbf69dc3139c8","sha1":"6d023eaa4695d81d969490809e0accde99283774","sha256":"e9a4471116369634c0983a52f775bdfc93cd48d2ca26bf9287a6bb84dc776bd3","sha512":"35d742dab10045547ec9ece767a7c86425c1f053a5bd5a91ef07eac50e69916f0db5e907061034daaaa652dcc8b0faced47e3fdcc33852c30b36c04cd587608f","ssdeep":"","tlshash":"fd219ee17031d8bdfbb6103a454c97de3073d155e91b56ed8609b196438a2fac92093f","first_seen":"2025-11-18T09:10:19.326913Z","last_seen":"2026-04-13T00:20:37.311592Z","times_seen":23,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/web-assets/_next/static/media/exodus.5e5e8337.svg","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /web-assets/_next/static/media/exodus.5e5e8337.svg HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-source-app: web\r\nreporting-endpoints: csp-endpoint=\"https://sentry-new.changelly.com/api/8/security/?sentry_key=8c37a8b3397241d19f5cff8a124c9d00\"\r\ncontent-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' changelly.com *.changelly.com *.gist.build *.google.com *.hotjar.io *.hotjar.com *.linkedin.com https://connect.facebook.net https://snap.licdn.com *.livechatinc.com *.sumsub.com www.gstatic.com cloudflare.com https://challenges.cloudflare.com *.customer.io *.customerioforms.com *.google-analytics.com *.livechat.com *.livechat-static.com; worker-src 'self' blob:; report-to csp-endpoint;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 26 Dec 2025 13:15:52 GMT\r\netag: W/\"aa1-19b5acd2340\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 3710017\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2B0VSHybKEpHHghbzTbRefI5JmcDBy9pXt3MN5fgANswCgUFjifYi61wHJlKiIg1Dtr1m0jbdHkCsAY8hFuVbnFPVgc6SocS77Aa8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30bac6ac124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2721,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dcdde3c97a84c6802a5f34189c5d9d65","sha1":"99e50d739c1342a45f78c74e4215b5d85ad3997b","sha256":"04a36245cce4684d6d83da6e0b7fdb875e2715968708d4e8bf63721ec7aa69b5","sha512":"1362443289dc3e8cbd253ba136e44cab180d5ee9288e1409393284aba68f34c3cc932475a85ea03d435c3063d2f51a69887e3deca4a9d71e7592457ff633bf8e","ssdeep":"","tlshash":"295187f9ef74bd47e2168ebdfe2e34d1101724fe868a82dd4019bf0d606255e3a04e64","first_seen":"2025-06-16T12:39:09.081899Z","last_seen":"2026-04-13T00:20:37.318394Z","times_seen":24,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/web-assets/_next/static/media/trezor.1634e164.svg","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /web-assets/_next/static/media/trezor.1634e164.svg HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-source-app: web\r\nreporting-endpoints: csp-endpoint=\"https://sentry-new.changelly.com/api/8/security/?sentry_key=8c37a8b3397241d19f5cff8a124c9d00\"\r\ncontent-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' changelly.com *.changelly.com *.gist.build *.google.com *.hotjar.io *.hotjar.com *.linkedin.com https://connect.facebook.net https://snap.licdn.com *.livechatinc.com *.sumsub.com www.gstatic.com cloudflare.com https://challenges.cloudflare.com *.customer.io *.customerioforms.com *.google-analytics.com *.livechat.com *.livechat-static.com; worker-src 'self' blob:; report-to csp-endpoint;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Dec 2025 10:02:20 GMT\r\netag: W/\"57a-19ad95cf7e0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 6408947\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJIhe%2BiMPQE0aSI6JOShPvHToQ2lcHKmd%2Fadx2n%2BLo0g0pT0J4Uf4KqHF69IO8JT%2FXyDi4p43KHhep8QWUnKUwjj%2BE4YvsAsL6nrbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30bcc93c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2753ef6e3bca6f35a7c81caa2cd336e4","sha1":"150c76b6e762ae4e6dacd46f8150e64c551f3914","sha256":"2466ba64db72274bddbaf3d6147c587b89857ee3fdbde3a4772201736d4563ca","sha512":"ddf9231aa2e12232fd1d12f50c534ba3995d6ea41c157c2c591776e95fa778ca06d6cd010627bef1d706dbbf3df472f9a9b0b82f8d85a930851731c1cf80e0ce","ssdeep":"","tlshash":"772114de8660e288d0b21aabfe7e98ef5e0e653f2f4541c95294a37da143cd8f505421","first_seen":"2025-06-16T12:39:09.091566Z","last_seen":"2026-04-13T00:20:37.308218Z","times_seen":24,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/eth.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/eth.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"56e39587f3ca76d82e43408540176df2\"\r\nlast-modified: Tue, 25 Apr 2023 13:43:48 GMT\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-amz-request-id: 1893F0AA8B2E51C9\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: block-all-mixed-content\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":542,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56e39587f3ca76d82e43408540176df2","sha1":"86896a7bd8520c681eee2b84ff9972ade7f5624b","sha256":"26063bc78d3624a928392f71d79cfbdb2d93697b66f202e23493c04e89a15f19","sha512":"df7e0310cec0afa8184a0e33f10bea5f9e1988a64ae33985e0a4c286ae00bc618451dd62fb1cde790c081f4bdee82d1c07ebe93bcd6937c0a5f489457846b5de","ssdeep":"","tlshash":"52f0f6e3b49821958c41cb028b1eb4aa1cf661ec4e7865c9a520261a6cc45ab5c9dfcc","first_seen":"2025-04-19T14:20:07.003452Z","last_seen":"2026-07-12T11:22:16.966743Z","times_seen":110,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/a8489eed8bd9e5a6.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/a8489eed8bd9e5a6.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:26 GMT\r\nETag: \"2123-642355d488e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1308\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8483,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8483), with no line terminators","md5":"635e1dfdf14ef4ce5f8dcf8539ce7964","sha1":"102a6695c8d1462ec480d0abc368effe774d1b1f","sha256":"5c1956c247457f31620cf4cee2b9c424d118a6888155ab577420b6a48a1ac343","sha512":"c81e07ba44a68c2f18547662e1f5549ba52c3c53be1a515bacf02a76609d9e8a1db47e3a9466dc533995810721e488e62bfa56c29f62b45b0998a6fd1fe5aac5","ssdeep":"192:q3txBPh+gYvqxCVlDEJYJqx5u+crJY8qxsv/paJYQTo9:wHW82Ot1cQTY","tlshash":"e002ab20801e909ed576bcd332c93f232979541196d04d1aef6c89a8dedbc7733d5b68","first_seen":"2025-11-18T09:10:19.299826Z","last_seen":"2026-04-13T00:20:37.32037Z","times_seen":26,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/1979520c3bd20e33.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/1979520c3bd20e33.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:56 GMT\r\nETag: \"1f2f-642355f125200-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2232\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7983,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7983), with no line terminators","md5":"686cf197e7ed04ae2ab6f58932197a9c","sha1":"8e372a758eaca7aed6bb232315d2202b5bbb4302","sha256":"ed3519ceb78184ce20ce268d16fb0a98a71a375e47c68bc1509275834f2e7570","sha512":"f2bd7b9475165810799100c0680aba4dff712db83629a0a3c8f39888401e15f69586715486cc33061e3a5004de69fbc9401c6b2f2a4cef072ed87cd5ff9271a5","ssdeep":"192:IdYtZggPd294Vt1cr9RasxdqzYrFjHYhzRRi:6Od294V498Wd6IxHcTi","tlshash":"a6f172b87d2190f9d833641a3bd9a0881122d6d9ad2b0ffe7589611c43d26e17762f3f","first_seen":"2025-11-18T09:10:19.305478Z","last_seen":"2026-04-13T00:20:37.310843Z","times_seen":21,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/e238ce73aefa78fc.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/e238ce73aefa78fc.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023702859\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:43:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hOnHwrEV1Ttzk9meIlZMQnPRgYBA7a7k1655c9tvGhcI8zm7NVu1vuyTKrkw8fJHTZXrcpMcsJHOx%2BFgjM6S5C9VDFobtRhOnv92g%3D%3D\"}]}\r\nexpires: Fri, 27 Nov 2026 12:44:00 GMT\r\ncache-control: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6776126\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\netag: W/\"691b0a62-5075\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f30a0989c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20597), with no line terminators","md5":"b32be7857d58e4d3a7b8a71f72de3529","sha1":"6a3c35671500bf1c7e8a6302b91407efddab9248","sha256":"21bbb6b368fd1cc7d605502985336465e090c005285b4ca197f9098f9381b34d","sha512":"f31722d05d1773d39e2f5028a845c3806b8f021c04c134e29302c355496727c74e008a0068e5b8e58fabcfbd1d77557abd1b4b718d7cc84153475cab38e98e5a","ssdeep":"384:jmhh0l3vBclnJ0Rxm/lROnjVJXCD/DtBgn:jPBdSlROnBJXy7jQ","tlshash":"2292753395203569b4239b6973d985983028c5459f335bfbed729a38c2ca1e236633bd","first_seen":"2025-11-18T09:10:19.331053Z","last_seen":"2026-04-13T00:20:37.309735Z","times_seen":21,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/xlm.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/xlm.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1350\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-66c\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 03:18:03 GMT\r\ncache-control: max-age=86400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1644\r\npriority: u=4;i=?0,cf-chb=(61;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 71021\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f73I7N9%2F%2BWHVZ%2Bp5tg1Pwim3BPhZNlyYmSd7rrfdTgcEssrrSZeibhppWL3DJSJ2wz3tq7EcygnZz6PQP52%2F4cYguyhxF8Zf8SZ3hf4PP3c%3D\"}]}\r\ncf-ray: 9cd7f30adaecc124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit gray+alpha, non-interlaced","md5":"ae3f1d78e0113a6f0f9599ace99a9ab3","sha1":"83d79433675375c47e008544366aba8dbf2c4071","sha256":"09a6ecf4e2d571340c1a20376e10a5f234230061fc97aa70801feefe5032dacb","sha512":"efcb6d65b517d9af28f9de6e3bc1da7eca8a9fbb8854423cf62241b2d408a7a086b6f75b3743855d28758eaed0afdb415c21d687a61a23b3e05df4302fcadcd5","ssdeep":"","tlshash":"01210bb35dde97e4c5440e05b3b37c7364594e3948171602ee3abe1c021f035d105ec4","first_seen":"2025-11-18T09:10:19.346557Z","last_seen":"2026-04-13T00:20:37.307168Z","times_seen":21,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/562eb40cb77cf3ef.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/562eb40cb77cf3ef.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:21:04 GMT\r\nETag: \"8b6-642355f8c6400-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 495\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2230,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2230), with no line terminators","md5":"4247d02cd7a496f3e1e37931a6ef2759","sha1":"c2c50395ac3ee485ae14876ed5ddf10d8783dddc","sha256":"703d2ce549592f63e9025ec565f3ecac9f9f0cea95f39ff49e32391020845eb9","sha512":"50bf4d8f29826993c05ed1d26f410e55dcf75881627d51ec474b768cc22cdc33c8e069f898fe23d5d677f0df7a5e6c94b7559445cb9ab87db8afefe68f17448a","ssdeep":"","tlshash":"4241f7e885a4094e23c30317cecd7e68a63d9dcb51245cbd7326129b4a8e3c9236f977","first_seen":"2025-11-18T09:10:19.342538Z","last_seen":"2026-04-13T00:20:37.321463Z","times_seen":21,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":191,"dns":0,"connect":103,"send":0,"wait":103,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/2a0b9930f773f000.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/2a0b9930f773f000.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: Promocodes_ABvariant=default; Max-Age=5356800; Domain=.changelly.com; Path=/; Expires=Thu, 16 Apr 2026 23:01:33 GMT; Secure; SameSite=None\nSmartRoutingP2_ABvariant=default; Max-Age=8035200; Domain=.changelly.com; Path=/; Expires=Sun, 17 May 2026 23:01:33 GMT; Secure; SameSite=None\nFiatFromIP_ABvariant=new; Max-Age=2678400; Domain=.changelly.com; Path=/; Expires=Mon, 16 Mar 2026 23:01:33 GMT; Secure; SameSite=None\nSmartRouting_ABvariant=default; Max-Age=2678400; Domain=.changelly.com; Path=/; Expires=Mon, 16 Mar 2026 23:01:33 GMT; Secure; SameSite=None\nTransactionWidget_ABvariant=new; Max-Age=2678400; Domain=.changelly.com; Path=/; Expires=Mon, 16 Mar 2026 23:01:33 GMT; Secure; SameSite=None\nwtpExperiment=502; Max-Age=1296000; Domain=.changelly.com; Path=/; Expires=Sat, 28 Feb 2026 23:01:33 GMT; Secure; SameSite=None\nfirst_visit_by_promo=1; Max-Age=5356800; Domain=.changelly.com; Path=/; Expires=Thu, 16 Apr 2026 23:01:33 GMT; Secure; SameSite=None\ndevice_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; Max-Age=32140800; Domain=.changelly.com; Path=/; Expires=Sat, 20 Feb 2027 23:01:33 GMT; Secure; SameSite=None\nipcountry=NO; Max-Age=2678400; Domain=.changelly.com; Path=/; Expires=Mon, 16 Mar 2026 23:01:33 GMT; Secure; SameSite=None\ntime=1771023693693; Domain=.changelly.com; Path=/; Secure; SameSite=None\r\nx-source-app: legacy-pod\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nx-nextjs-cache: HIT\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWb4m3hCFny1IqJ8FOF8q%2Ba6xFQPhEGd01Avt0V0VodgbU%2F27uTW0jAzvZ%2BnkPCA4yU3ZwnEx1K6AgO7nFZcuLMXxaZ2%2B8ngCtbuTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f2c54a70c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":78,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/api/?id=2\u0026from=btc\u0026to=eth\u0026amountFrom=0.1\u0026isFixed=false","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /api/?id=2\u0026from=btc\u0026to=eth\u0026amountFrom=0.1\u0026isFixed=false HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/?email=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/api/?id=1\u0026from=btc\u0026to=eth\u0026amountFrom=0.1\u0026isFixed=false","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:34.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /api/?id=1\u0026from=btc\u0026to=eth\u0026amountFrom=0.1\u0026isFixed=false HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/ef82f4af39354feb.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/ef82f4af39354feb.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:50 GMT\r\nETag: \"25e0-642355eb6c480-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3004\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9696,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9696), with no line terminators","md5":"bf5fb6361d0de46fd42fcc0d2c4342d5","sha1":"8c8b43523c4f19122b63b4cbbc9048ffea886651","sha256":"cb42bad6cafd2ab03f7a52899938d29b87f641a60fa3dba8ceb0fc417249fa7d","sha512":"bf047d45e37cb7ab4dd5d044991f26a73562e0bd18f60bef8e1536c2d3a1283263702f1ebcea0ec8998fd96722c539a8e78dad179fd94b58e0a3c703be0e3982","ssdeep":"192:8/ffUE2wnPQ6GLMWMXDeWNLu0YIC4mV8YNjIh:WfsuGLMWMzekLu5IC4mK","tlshash":"bb12d7ae9f0081f9f81bca5e53dc815c442cc263df069d7ae651a41cc7c7aa903a3da7","first_seen":"2025-11-18T09:10:19.334805Z","last_seen":"2026-04-13T00:20:37.31771Z","times_seen":21,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/1cb0eb1d00b26a4e.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/1cb0eb1d00b26a4e.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:32 GMT\r\nETag: \"13795-642355da41c00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15327\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":79765,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65470)","md5":"d3653f78cb0765fce7411e1a510e9769","sha1":"a15dde6aac2aafbc243520178486aac6be7cf7eb","sha256":"8517167c6c714b0ee44a0abd7ff2f764af1387e06407a6faa5670a9fca5ca623","sha512":"e1c6c0847a36b79284591b466a62fa744a450a86ebdbda17118bd49623ba6ae389741b6328ff7605d9ff3f9b1aa60a196f6109201b34c5092538818a6d089ee7","ssdeep":"1536:H5Xs4h3kRfTL8Foku+D+FC/KxOoL3tB4vMrE1gNi8Ih1hXhY7CE659nX9/R18dA9:H5Xs4h3kRfTL8Foku+D+FC6brE1gNi8o","tlshash":"6373a6affb12117e6c3781b1c294bbec711af541df2216fafa2265214dc17f10e69628","first_seen":"2025-11-18T09:10:19.336227Z","last_seen":"2026-04-13T00:20:37.32094Z","times_seen":21,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/2772de317f07e534-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/2772de317f07e534-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/?email=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 07 Oct 2025 16:58:04 GMT\r\nETag: \"3fd0-6409478a9df00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16336\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16336, version 1.0","md5":"c9799d10d2244c347708a80194156669","sha1":"365833cc5bc967e58537294063574fcdd8bce526","sha256":"c26c8b74d570cc06f9790b21bc4a81c86ebbc63809c1ccd6f0a3d1e86fc68565","sha512":"bf28534767bb39794f03dc146db2d482ccc42e84b576da7c563f5aee135172e05404da681c71cfc9ec346ad1c0317ccc9314116a07476e65f92e8cdfa993ae9b","ssdeep":"384:1iYFevfys/a9G1M9w8lrmbchJtz5sI+99Rwyci:1iYkSdG+VJttXMz","tlshash":"4f72c06980081b81bc761a73a373756e641e7b6bce196d2164073d0fbb30c58dda8b9e","first_seen":"2025-09-07T20:05:59.477196Z","last_seen":"2026-07-21T23:20:07.117049Z","times_seen":309,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/white-man.88107a67.svg","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/white-man.88107a67.svg HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: https:///web-assets/_next/static/media/white-man.88107a67.svg\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/xrp.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/xrp.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1363\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-5b7\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 08:32:05 GMT\r\ncache-control: max-age=86400\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 476;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1463\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 52178\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASHKPPsPxC6jIvU6P5SCMp%2BcjdzSvvLgw5Iekr3zu5aQV7FTrzACGqJOV%2Ffgwk2B0Sa%2By5JVJwHrGiRXWNUE4fItu5WixhD91iAXiaLcgr4%3D\"}]}\r\ncf-ray: 9cd7f30adadac124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"3d9a397913eaf6fb66da5b6c5ff3ef45","sha1":"a8b641de233e739e732791f52724a98dc9ce2cac","sha256":"f10e2553dc76102b5244421dee6d9eee7fc7e8fed8e6be1624f1cab6c5bf001e","sha512":"deaac3fd68dfc3510b6507a783746ab72dc0912f686005f5cc56a70fb17fafa8faf8f9289c685dd9dbf52022cc3c0ec3bf9d7bf301804cb337e64fd5c43f8ff4","ssdeep":"","tlshash":"f821d563c67c6c1c9c242e33b4713a7b8c132e5f9c40e580748971a892b8347a1d5ff9","first_seen":"2025-11-03T18:07:18.081296Z","last_seen":"2026-05-09T23:57:36.770097Z","times_seen":29,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/sol.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/sol.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3398\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-f9b\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 11:24:21 GMT\r\ncache-control: max-age=86400\r\ncf-polished: ok, orig_size=3995\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(74;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 41832\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7gk8cXX%2BgxfbzDPdneL2d%2FqSWh52gMmSuIEZ7JMpFEV2eKuWzVZXkHfG99K7gWlfATjHepd%2F0gSdDTXceiVUp7NGsywk%2FH4BHlLqnlWPiI%3D\"}]}\r\ncf-ray: 9cd7f2c6cd09c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"d98d6cf795fa37bb5dcb88214acabf85","sha1":"e5637ac825a2271a8ad14d65b2e76f24b07e4297","sha256":"c29039e1fb3d5f643e5a525ae0b520aff96700bb3e2829a5a086c66a67ea296e","sha512":"f1a35b126e0808957a64add75be94774262d1fa8a63d39662b2e2b10dd4cb5e68712007a579d103005336eb7b1fb691d2972a89ed6f1e1963761b6618b01b5bc","ssdeep":"","tlshash":"3a617c2891206b27983e53cb6e4b6530cedf36ca8b30e9ae519269101e7d890233724f","first_seen":"2025-11-03T18:07:18.060913Z","last_seen":"2026-05-09T23:57:36.604477Z","times_seen":28,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":286,"dns":0,"connect":9,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/?email=","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:01:38.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /en/?email= HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:38 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":628150,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3001), with CRLF line terminators","md5":"a7a653803a6510213fc4dc7c337361c0","sha1":"a8270449bfce878f3effd6d2851a3541ca8129d0","sha256":"f027120b64d8bef6ef5acf34755322cf05f9064cc1d65e5d02e0f2ec62d9cb59","sha512":"2a158bfc1f394e2f02dcbf73efe953fa25f081f91cfae2819dcec544a34a2bf91fb0ef75fded70333ef8f0cdc30f6018650ac95a8f10974eead3ea684a7ecfc9","ssdeep":"6144:yRxHqAJ8J6TFNAqDtVwmRzvo+ReNlV/Ezw1nGXu1cq7xlponWcIHlwe3+cIb9pTp:SKFPb6D0mw8tiW","tlshash":"fdd4d8a515e81c7e4c6362d2af417646d2ec42cbd21a8c9b77ecdbc21bf2ee64523314","first_seen":"2026-02-13T23:02:10.564388Z","last_seen":"2026-02-13T23:02:10.564388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/ef82f4af39354feb.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/ef82f4af39354feb.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:50 GMT\r\nETag: \"25e0-642355eb6c480-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3004\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9696,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9696), with no line terminators","md5":"bf5fb6361d0de46fd42fcc0d2c4342d5","sha1":"8c8b43523c4f19122b63b4cbbc9048ffea886651","sha256":"cb42bad6cafd2ab03f7a52899938d29b87f641a60fa3dba8ceb0fc417249fa7d","sha512":"bf047d45e37cb7ab4dd5d044991f26a73562e0bd18f60bef8e1536c2d3a1283263702f1ebcea0ec8998fd96722c539a8e78dad179fd94b58e0a3c703be0e3982","ssdeep":"192:8/ffUE2wnPQ6GLMWMXDeWNLu0YIC4mV8YNjIh:WfsuGLMWMzekLu5IC4mK","tlshash":"bb12d7ae9f0081f9f81bca5e53dc815c442cc263df069d7ae651a41cc7c7aa903a3da7","first_seen":"2025-11-18T09:10:19.334805Z","last_seen":"2026-04-13T00:20:37.31771Z","times_seen":21,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/eth.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/eth.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\netag: W/\"56e39587f3ca76d82e43408540176df2\"\r\nx-xss-protection: 1; mode=block\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\ncontent-security-policy: block-all-mixed-content\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-request-id: 1893F0AD1B0A02E3\r\nlast-modified: Tue, 25 Apr 2023 13:43:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":542,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56e39587f3ca76d82e43408540176df2","sha1":"86896a7bd8520c681eee2b84ff9972ade7f5624b","sha256":"26063bc78d3624a928392f71d79cfbdb2d93697b66f202e23493c04e89a15f19","sha512":"df7e0310cec0afa8184a0e33f10bea5f9e1988a64ae33985e0a4c286ae00bc618451dd62fb1cde790c081f4bdee82d1c07ebe93bcd6937c0a5f489457846b5de","ssdeep":"","tlshash":"52f0f6e3b49821958c41cb028b1eb4aa1cf661ec4e7865c9a520261a6cc45ab5c9dfcc","first_seen":"2025-04-19T14:20:07.003452Z","last_seen":"2026-07-12T11:22:16.966743Z","times_seen":110,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/btc.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/btc.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1764\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-745\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 08:34:40 GMT\r\ncache-control: max-age=86400\r\ncf-polished: ok, orig_size=1861\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 616;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 52013\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsJzmHGDeTdH9YL7HJDxxn2qDNQsWprWwJY5dstb2avJZIP%2FDcdwegd302yvRyhJt9%2BZ3vo%2FH4JasFKBniLJT0Y6Q56I2rjz0NhzwDGgnAI%3D\"}]}\r\ncf-ray: 9cd7f2c6cd02c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"ecf532dbca922350b8dcabc3db97b944","sha1":"95690bdd60c005a206bd2f355f56820253b33a24","sha256":"0bea3ad10ece6555b5338eb43f66772c52eecb5fa913a64d9227d72b30f9cb8f","sha512":"1b826f2525f92f581b014a795aaf3d8cf5c55b2f8c9f54403e95258d9fba9daa1163226a21dbcbfe93e222161d29c47e1a223cde69db32e0853cfb475fddfe35","ssdeep":"","tlshash":"b23109c316c1ebb2e98333ab2484107025316d8ad0c419a7bd92b89edab04b4259fb8d","first_seen":"2025-07-06T07:24:54.91542Z","last_seen":"2026-07-15T02:48:21.506931Z","times_seen":40,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":38,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/btc.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/btc.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nlast-modified: Tue, 25 Apr 2023 13:43:39 GMT\r\netag: W/\"4bae6a37ded04d1a71c1c035f4aa5a23\"\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\ncontent-security-policy: block-all-mixed-content\r\nx-amz-request-id: 1893F0AD1B442059\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2142,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4bae6a37ded04d1a71c1c035f4aa5a23","sha1":"3939945d1ee316841ba4cbff66026e10798d81d4","sha256":"445b47abd56e283946f651291e0536b0d2c8724223160d3b54976fe30abeef6f","sha512":"99de9d71c98d65d2f8e72afcd9fd0cde81b7bbdec474bbf0fab4ef98fc98deed6ff90121b543beb73ff25eef8e14296c53a38f7f1860cf9df8831f66dc2e1a30","ssdeep":"","tlshash":"404162e6b3d4f2d0e5428330d421c6b9b69f34b6af6ce74882804fa4ac0c24589cddd4","first_seen":"2025-04-19T14:20:06.99876Z","last_seen":"2026-07-12T11:22:16.965513Z","times_seen":112,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/eth.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/eth.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-825\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 18:44:02 GMT\r\ncache-control: max-age=86400\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 671;u=5;i=?0)\r\ncf-polished: ok, orig_size=2085\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 15462\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bXsM36KqO1Kqjw%2BotGqkNDSFlEtd2aq3y89xH%2Fvmo7S%2BWrEM1bTaHp5G9PLAWD%2BjBn7S5oci%2BtPuLrPFidYY6zvPab%2Ba2vlYqACDnLwyDY%3D\"}]}\r\ncf-ray: 9cd7f30aaa71c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"388929c6a4f47a2093eb6c2b71c3a0bf","sha1":"f3677ce632f498d966c07324426a8503f6a86742","sha256":"c31de7790cde77f8f1a73721aa7f322930242e5576e11ce5b0dbb00529ab3ecd","sha512":"5b759742360aa357116f4e3359e237ed6c8813ec9d94d1aa347cc40877758d8fc06a228767344ee059536a0b770618e627ab88f633fcb2070a35800290de5c1a","ssdeep":"","tlshash":"1f410a5007e8ed200c8a316fdbc42968c349e5fdd22462ad47dee75939ef28099a8d21","first_seen":"2025-07-06T07:24:54.946174Z","last_seen":"2026-07-15T02:48:21.474068Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/web-assets/_next/static/media/coolwallet.a9d7be1c.svg","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /web-assets/_next/static/media/coolwallet.a9d7be1c.svg HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-source-app: web\r\nreporting-endpoints: csp-endpoint=\"https://sentry-new.changelly.com/api/8/security/?sentry_key=8c37a8b3397241d19f5cff8a124c9d00\"\r\ncontent-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' changelly.com *.changelly.com *.gist.build *.google.com *.hotjar.io *.hotjar.com *.linkedin.com https://connect.facebook.net https://snap.licdn.com *.livechatinc.com *.sumsub.com www.gstatic.com cloudflare.com https://challenges.cloudflare.com *.customer.io *.customerioforms.com *.google-analytics.com *.livechat.com *.livechat-static.com; worker-src 'self' blob:; report-to csp-endpoint;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 26 Nov 2025 12:09:23 GMT\r\netag: W/\"e13-19ac0117d38\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 6818448\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FkDS4wugG7yN%2BCqNozxSydTdiZnzss4Y8DKQ2lbctJXhqCJv95MUbHbZSN8oGtLd9ydt8ceCjK4qZPn7bmPCfGhBcaOn2%2BaAGYXatg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30bcc8cc124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3603,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"731de0e77b4d525c53a0e57248b8129a","sha1":"3cd03b3a7d30eae58f3ced46df90bfab4cb6cc19","sha256":"e05d5b6ed65ae45c49ac5a87089114cac78bfc2e6ac5fe5d00a884070c1571ae","sha512":"a0977d19b52a55db0d358f612f9a36e9a7e8859a0eeff9432ed8b2255d343ad95acaf9a3b88d4e66619e628a3eebb72586e69da405da96c3754946c8248d8e30","ssdeep":"","tlshash":"bf7186d51b30a0c8d4d7dd6dfe2e8c85220e74f976274ac585ddda65658b8c8e406e00","first_seen":"2025-06-16T12:39:09.102076Z","last_seen":"2026-04-13T00:20:37.32365Z","times_seen":24,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/image?url=%2Fweb-assets%2Fauth-user-bonus%2Fauth-user-bonus-present.png\u0026w=32\u0026q=75","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/image?url=%2Fweb-assets%2Fauth-user-bonus%2Fauth-user-bonus-present.png\u0026w=32\u0026q=75 HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1008\r\nserver: cloudflare\r\nx-source-app: web\r\nreporting-endpoints: csp-endpoint=\"https://sentry-new.changelly.com/api/8/security/?sentry_key=8c37a8b3397241d19f5cff8a124c9d00\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nvary: Accept, accept-encoding\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 5qAFKyiFzEyOwE5nuvQjcdSxfqD6pVLLa64xkw01trQ=\r\ncontent-disposition: inline; filename=\"auth-user-bonus-present.webp\"\r\nx-nextjs-cache: STALE\r\naccept-ranges: bytes\r\nage: 12\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TRv1TXF5q097WBRHFP1JZrBtzOpYctlSJwSKe1lJ%2FnEWpuXCA8iGta44eW9YrDzuyEwfKcfnvcrcWwX1NaZu9zPsgokGXSrbjjyVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30bcc9ac124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e31b0efd424d3e2737fd2e2c9744fda1","sha1":"d447b24ff99c10aaa241ddca6a347607d3dfc28b","sha256":"e6a0052b2885cc4c8ec04e67baf42371d4b17ea0faa552cb6bae31930d35b6b4","sha512":"fd8083a8588d0a998f4ad9a7d22f3254d9b1656b4fe70c9498515be9dd239798102a83ae1a8e8c50aed8e4fd89787c173937b734946090588ebf515f7a0b89ca","ssdeep":"","tlshash":"431165b885f11a5da7583c74818b63a2eacba06cb29069f344a6181d832fd0169fa74d","first_seen":"2025-09-09T19:03:18.435527Z","last_seen":"2026-04-13T00:20:37.318958Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/cec98bae3d0043e9.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/cec98bae3d0043e9.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:42 GMT\r\nETag: \"1179-642355e3cb280-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1180\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4473,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4473), with no line terminators","md5":"0e1cb4563c01b879df922ac731f343d1","sha1":"55c81f3789e6603618985eba5d4448452a151cbe","sha256":"c3b636d825c584be8a600e25e9979202a3a38b0d7cbec3abc3c50beb90e27e17","sha512":"897325e8f562304455201dc7d9d74cd2f8ffc03d7ba538932a2f9c826b7ab3a7d6ec16166876e11ce13f3d9fb770545736c15f5509bebf7775ba57bae4d0eb63","ssdeep":"96:wmqHJFAQ8QaNXVyTeu03gLyTUZJNeMquVyPPCxrya03sE:EHJFDpaFVBu0QEmJNOuVVd03sE","tlshash":"a191a965f189617b132bc1bc8841fa23b388b549db641fe77f628054b68c6c32fc9663","first_seen":"2025-11-18T09:10:19.318225Z","last_seen":"2026-04-13T00:20:37.32679Z","times_seen":21,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/eth.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/eth.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-825\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 18:44:02 GMT\r\ncache-control: max-age=86400\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 671;u=5;i=?0)\r\ncf-polished: ok, orig_size=2085\r\ncf-bgj: imgq:100,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 15451\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b1xijmXPzE%2FHVYdndRHmRHX0PmRrtzz1IbficYm1B347lZPQZJsYedJ2NKT0Ie7rbZJJ2TfZVvHnrhx4c7yrpZ9lmnb2m%2F%2B51kLdDJCASas%3D\"}]}\r\ncf-ray: 9cd7f2c6cd07c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"388929c6a4f47a2093eb6c2b71c3a0bf","sha1":"f3677ce632f498d966c07324426a8503f6a86742","sha256":"c31de7790cde77f8f1a73721aa7f322930242e5576e11ce5b0dbb00529ab3ecd","sha512":"5b759742360aa357116f4e3359e237ed6c8813ec9d94d1aa347cc40877758d8fc06a228767344ee059536a0b770618e627ab88f633fcb2070a35800290de5c1a","ssdeep":"","tlshash":"1f410a5007e8ed200c8a316fdbc42968c349e5fdd22462ad47dee75939ef28099a8d21","first_seen":"2025-07-06T07:24:54.946174Z","last_seen":"2026-07-15T02:48:21.474068Z","times_seen":37,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":288,"dns":0,"connect":9,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/570280955202ed2a.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/570280955202ed2a.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:21:24 GMT\r\nETag: \"12a8e-6423560bd9100-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 14765\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":76430,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"2b0c3499009534ae5d9925c54deb1352","sha1":"414e63504858f5672750744564e5f1e1a60a3771","sha256":"eddc59d286e4ede62379be5edd6ff94150d23f21700c4b6fa9bd1bc779166a13","sha512":"5493828c3e42402c3abfd648996726c2de20417dae394e0b3594837b581b20374997e7f1de3983e60965ee48c41e045b771e9e6fae1222f75b6c106e521395d0","ssdeep":"1536:G5ls4h3kRfTL8Foku+D+FC/KxOoL3tB4sMrE1gNi8Ih1hXhY7CE659nX9/R18dA9:G5ls4h3kRfTL8Foku+D+FC6YrE1gNi8o","tlshash":"ec73b75fbb17113e6c3781b1c2e0bedc711af140df262aeafa2255210ec57f50d6a628","first_seen":"2025-11-18T09:10:19.333178Z","last_seen":"2026-04-13T00:20:37.308707Z","times_seen":21,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: application/xml\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-amz-request-id: 1893F0AD136C780A\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\ncontent-security-policy: block-all-mixed-content\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/css/a8489eed8bd9e5a6.css\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 07 Oct 2025 16:58:06 GMT\r\nETag: \"6000-6409478c86380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 24576\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-07-24T20:14:11.932046Z","times_seen":10421,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/usdtbsc.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/usdtbsc.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1240\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-a6d\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 04:52:24 GMT\r\ncache-control: max-age=86400\r\ncf-polished: ok, orig_size=2669\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 286;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 65360\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nZ28nqawCUFjyniNXAKmZ6x0dwQC3QsI9zsgKux%2FumPuG3ZHW9Uv2m41%2FEn%2BTU9RGKWlSigBQrgCheROAhO5wqaM2%2BcN6uWlipg5xXTLPw%3D\"}]}\r\ncf-ray: 9cd7f30adae7c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"00902f51e686f522e3c15dcdcb5b9058","sha1":"8090c36521dbb61fc99259b482b7a38273507e50","sha256":"844f4263b7de02ee383226aac763afe148d37549fb0438d2ab1a76abae37851d","sha512":"991989734fcc73ab1fd178b072b7e0cccb9ed38ca95b26b88159498fab7c53ae98db0d17c5a5411dac08c90306182033f3a1cce29d7cc1354f98a0e69cd55551","ssdeep":"","tlshash":"e221e78e457878b18a181f2b8a8f3344feab0a621d253b227c0900697e212d3fac71c0","first_seen":"2025-11-18T09:10:19.296271Z","last_seen":"2026-05-09T23:57:36.688813Z","times_seen":23,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/?email=","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:01:36.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /en/?email= HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":628151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3001), with CRLF line terminators","md5":"c424de16290549f6ece49c6228b1311c","sha1":"502155e838a456ed90ba157647ac8c80fd0800fd","sha256":"5e8420cb9c39d10973d5b1e9f4505584c133ff295aab152ccd077487ebebec76","sha512":"e110fda2ba2362443765b1f0b3a357649426e632af277263f731d94532d626114ae08faf08d2f7ceeb80104bbd6b09d6576f07b4cb5743ec907b4d27281e83f2","ssdeep":"6144:CRxHqAJ8J6TFNAqDtVwmRzvo+ReNlV/Ezw1nGXu1cq7xlponWcIHlwe3+cIb9pTp:iKFPb6D0mw8tiW","tlshash":"a8d4d8a515e81c7e4c6362d2af417646d2ec42cbd21a8c9b77ecdbc21bf2ee64523314","first_seen":"2026-02-13T23:02:10.571693Z","last_seen":"2026-02-13T23:02:10.571693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/562eb40cb77cf3ef.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/562eb40cb77cf3ef.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:21:04 GMT\r\nETag: \"8b6-642355f8c6400-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 495\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2230,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2230), with no line terminators","md5":"4247d02cd7a496f3e1e37931a6ef2759","sha1":"c2c50395ac3ee485ae14876ed5ddf10d8783dddc","sha256":"703d2ce549592f63e9025ec565f3ecac9f9f0cea95f39ff49e32391020845eb9","sha512":"50bf4d8f29826993c05ed1d26f410e55dcf75881627d51ec474b768cc22cdc33c8e069f898fe23d5d677f0df7a5e6c94b7559445cb9ab87db8afefe68f17448a","ssdeep":"","tlshash":"4241f7e885a4094e23c30317cecd7e68a63d9dcb51245cbd7326129b4a8e3c9236f977","first_seen":"2025-11-18T09:10:19.342538Z","last_seen":"2026-04-13T00:20:37.321463Z","times_seen":21,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/6b49df2ed055265f.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/6b49df2ed055265f.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:18:44 GMT\r\nETag: \"482-6423557342900-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 427\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1154), with no line terminators","md5":"8b8554d88732910aaadd633af363554d","sha1":"3f8d41f6efa0775e215fc6ba03885b61a189c3a2","sha256":"50a89f43ca5b300d89d61b21d6e7988005246d3041a5c32cef353526a25d9484","sha512":"51bcc2cd74fbc4792fcd30d3935fab1b6fc6822d1abe8949c3d2a3159cb3019474d73b87bed4a49e1603544b8677d34b5cd1a4ab39b3c538a11bca6c4a542203","ssdeep":"","tlshash":"2621d7216070489c37ad215dcfce54e61c689446247c58287b7f809b38c92e99bbdd22","first_seen":"2025-09-09T19:03:18.444669Z","last_seen":"2026-04-13T00:20:37.321989Z","times_seen":27,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":93,"dns":21,"connect":25,"send":0,"wait":26,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.veryicon.com/png/o/miscellaneous/8atour/success-35.png","fqdn":"icons.veryicon.com","domain":"veryicon.com","tld":"com"},"ip":{"addr":"172.67.165.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c5dc5105.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 03:03:54 GMT","end":"Tue, 14 Apr 2026 04:03:51 GMT"},"fingerprint":{"sha1":"66:13:18:EB:E7:27:F1:6B:37:4A:FB:0C:1E:47:D8:33:49:98:33:7C","sha256":"44:BC:F2:3D:EF:4A:DC:B6:6C:16:25:46:9E:68:E0:70:E9:4F:9F:C2:CB:46:DA:BA:2F:CB:63:77:E2:8A:14:8D"}}},"request":{"raw":"GET /png/o/miscellaneous/8atour/success-35.png HTTP/1.1\r\nHost: icons.veryicon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 20181\r\naccept-ranges: bytes\r\netag: \"f6e9fba06f31d20504265dc3cc860f58\"\r\nlast-modified: Tue, 22 Apr 2025 17:31:37 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nage: 6133\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8sH3Tp3M%2FH0NM7ccLxbjfAsXELGMOOWmeu5o%2FMUJj9T00omIHTTCNeRe6LNhcxdqeYVVrAf1xC5WVSrCBs2VBmNQzG%2BtoQOuL7GbGUK14L30Q%3D%3D\"}]}\r\ncf-ray: 9cd7f30ad9f94453-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f6e9fba06f31d20504265dc3cc860f58","sha1":"4bcd9f321dffce8c6dd7482216741e0c25f78878","sha256":"9434d1489f36d361d5cff15ab2fa491b53c88e4a7958b37acdc32bfe8b9c9ab2","sha512":"38d85bc11c8e2627e20347cf574925fdbcde3847b1e6da37ad0a21a97de814e9c5fc375611f8599e48510d6b2f4668c60033ed6c95db56e22bf153a03055067f","ssdeep":"384:SxhwL8Jx/gOXCJCQ1LdxSy00XT7UXsFZo0wNb3DS7K7Mw+NG:S3x/gOXCU2n0UTisFZo02bT80+Y","tlshash":"6e92e0d4a4ffec4c8c27afa14398daabb7d15954b513f27b13756372a091cc1482e938","first_seen":"2025-11-18T09:10:19.340117Z","last_seen":"2026-04-13T00:20:37.310207Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/btc.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/btc.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1764\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-745\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 08:34:40 GMT\r\ncache-control: max-age=86400\r\ncf-polished: ok, orig_size=1861\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 616;u=5;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 52023\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zzcX2tZ2eegeILGuEa3wkDYsq3L0t01DEa3SNFUeFQpjlFyEpobwdbSq0qUJfbaXXFiK8HlxE2oZTzn30WzaacLWRuHDULsz%2Fl8V%2Fb%2FmyXc%3D\"}]}\r\ncf-ray: 9cd7f30a9a6ec124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"ecf532dbca922350b8dcabc3db97b944","sha1":"95690bdd60c005a206bd2f355f56820253b33a24","sha256":"0bea3ad10ece6555b5338eb43f66772c52eecb5fa913a64d9227d72b30f9cb8f","sha512":"1b826f2525f92f581b014a795aaf3d8cf5c55b2f8c9f54403e95258d9fba9daa1163226a21dbcbfe93e222161d29c47e1a223cde69db32e0853cfb475fddfe35","ssdeep":"","tlshash":"b23109c316c1ebb2e98333ab2484107025316d8ad0c419a7bd92b89edab04b4259fb8d","first_seen":"2025-07-06T07:24:54.91542Z","last_seen":"2026-07-15T02:48:21.506931Z","times_seen":40,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/570280955202ed2a.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/570280955202ed2a.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:21:24 GMT\r\nETag: \"12a8e-6423560bd9100-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 14765\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":76430,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"2b0c3499009534ae5d9925c54deb1352","sha1":"414e63504858f5672750744564e5f1e1a60a3771","sha256":"eddc59d286e4ede62379be5edd6ff94150d23f21700c4b6fa9bd1bc779166a13","sha512":"5493828c3e42402c3abfd648996726c2de20417dae394e0b3594837b581b20374997e7f1de3983e60965ee48c41e045b771e9e6fae1222f75b6c106e521395d0","ssdeep":"1536:G5ls4h3kRfTL8Foku+D+FC/KxOoL3tB4sMrE1gNi8Ih1hXhY7CE659nX9/R18dA9:G5ls4h3kRfTL8Foku+D+FC6YrE1gNi8o","tlshash":"ec73b75fbb17113e6c3781b1c2e0bedc711af140df262aeafa2255210ec57f50d6a628","first_seen":"2025-11-18T09:10:19.333178Z","last_seen":"2026-04-13T00:20:37.308707Z","times_seen":21,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":68,"dns":0,"connect":29,"send":0,"wait":28,"receive":18,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/usdt20.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/usdt20.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1240\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-a6d\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 03:12:15 GMT\r\ncache-control: max-age=86400\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 286;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2669\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 71357\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7510MYnPS%2BKpQGFCj2cPBM%2B0vl%2BBDLdM9235T2TIHbQGe6ELjBOpaU5%2BlQd4dBTIdUZMlb0dAGQ9ah4H5zpPKRrbOVAjLlOicAcvVMYSRH0%3D\"}]}\r\ncf-ray: 9cd7f2c6cd01c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"00902f51e686f522e3c15dcdcb5b9058","sha1":"8090c36521dbb61fc99259b482b7a38273507e50","sha256":"844f4263b7de02ee383226aac763afe148d37549fb0438d2ab1a76abae37851d","sha512":"991989734fcc73ab1fd178b072b7e0cccb9ed38ca95b26b88159498fab7c53ae98db0d17c5a5411dac08c90306182033f3a1cce29d7cc1354f98a0e69cd55551","ssdeep":"","tlshash":"e221e78e457878b18a181f2b8a8f3344feab0a621d253b227c0900697e212d3fac71c0","first_seen":"2025-11-18T09:10:19.296271Z","last_seen":"2026-05-09T23:57:36.688813Z","times_seen":23,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":284,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/usdt20.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/usdt20.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1240\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-a6d\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 03:12:15 GMT\r\ncache-control: max-age=86400\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 286;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2669\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 71368\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y02sEtLrfgjY0L9VpSbaXNMH2oBSeugSmd2EdCLJ7e07eohGjMWhfyMl2N2WyvkK8mKvtZ1smH9mnvp1YYvlkGJtiATLEOZ3XKDHZL7meuM%3D\"}]}\r\ncf-ray: 9cd7f30adaeac124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"00902f51e686f522e3c15dcdcb5b9058","sha1":"8090c36521dbb61fc99259b482b7a38273507e50","sha256":"844f4263b7de02ee383226aac763afe148d37549fb0438d2ab1a76abae37851d","sha512":"991989734fcc73ab1fd178b072b7e0cccb9ed38ca95b26b88159498fab7c53ae98db0d17c5a5411dac08c90306182033f3a1cce29d7cc1354f98a0e69cd55551","ssdeep":"","tlshash":"e221e78e457878b18a181f2b8a8f3344feab0a621d253b227c0900697e212d3fac71c0","first_seen":"2025-11-18T09:10:19.296271Z","last_seen":"2026-05-09T23:57:36.688813Z","times_seen":23,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/2a0b9930f773f000.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/2a0b9930f773f000.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023693693\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 13 Feb 2026 23:01:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; Max-Age=32140800; Domain=.changelly.com; Path=/; Expires=Sat, 20 Feb 2027 23:01:36 GMT; Secure; SameSite=None\nipcountry=NO; Max-Age=2678400; Domain=.changelly.com; Path=/; Expires=Mon, 16 Mar 2026 23:01:36 GMT; Secure; SameSite=None\ntime=1771023696507; Domain=.changelly.com; Path=/; Secure; SameSite=None\r\nx-source-app: legacy-pod\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nx-nextjs-cache: HIT\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idI9QYcaPL1wuOJHLwcqpC9PfY6MjOdVGMrCCKQ%2BL4TIoxbFlh4JnPE3ZLlpgbQ%2B7mEfVop6NlRgsarXxz9podDH6IRGH77MuerrRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f2d6fc16c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:01:33.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":628023,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3001), with CRLF line terminators","md5":"a4b5c7f26f118648c9668ce70d1b7a65","sha1":"cadcdf4555c62fd34be38b4964708a82b24e7210","sha256":"bbec2e8f5216486e781255f4d40557d785291a4a9cce9e4421ae881e0966c1cb","sha512":"553836a54a129fa784aa66417e2f48dab807e5a8d177123dc61bb3764cc6ae5017b53b00ca33fb1215fc6c9badde6f46df4769743fa046593b1b569f9a732908","ssdeep":"6144:7RxHq8J8J6TFNAqDtVwmRzvo+ReNlV/Ezw1nGXu1cq7xlponWcIHlwe3+cIb9pTp:HkFPb6D0mw8tiW","tlshash":"e0d4d8a515e81c7e4c6362d2af417646d2ec42cbd21a8c9b77ecdbc21bf2ee64523314","first_seen":"2026-02-13T23:02:10.57767Z","last_seen":"2026-02-13T23:02:10.57767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/1979520c3bd20e33.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/1979520c3bd20e33.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:56 GMT\r\nETag: \"1f2f-642355f125200-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2232\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7983,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7983), with no line terminators","md5":"686cf197e7ed04ae2ab6f58932197a9c","sha1":"8e372a758eaca7aed6bb232315d2202b5bbb4302","sha256":"ed3519ceb78184ce20ce268d16fb0a98a71a375e47c68bc1509275834f2e7570","sha512":"f2bd7b9475165810799100c0680aba4dff712db83629a0a3c8f39888401e15f69586715486cc33061e3a5004de69fbc9401c6b2f2a4cef072ed87cd5ff9271a5","ssdeep":"192:IdYtZggPd294Vt1cr9RasxdqzYrFjHYhzRRi:6Od294V498Wd6IxHcTi","tlshash":"a6f172b87d2190f9d833641a3bd9a0881122d6d9ad2b0ffe7589611c43d26e17762f3f","first_seen":"2025-11-18T09:10:19.305478Z","last_seen":"2026-04-13T00:20:37.310843Z","times_seen":21,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/web-assets/_next/static/media/ledger.1d22c48a.svg","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /web-assets/_next/static/media/ledger.1d22c48a.svg HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023704680\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-source-app: web\r\nreporting-endpoints: csp-endpoint=\"https://sentry-new.changelly.com/api/8/security/?sentry_key=8c37a8b3397241d19f5cff8a124c9d00\"\r\ncontent-security-policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' changelly.com *.changelly.com *.gist.build *.google.com *.hotjar.io *.hotjar.com *.linkedin.com https://connect.facebook.net https://snap.licdn.com *.livechatinc.com *.sumsub.com www.gstatic.com cloudflare.com https://challenges.cloudflare.com *.customer.io *.customerioforms.com *.google-analytics.com *.livechat.com *.livechat-static.com; worker-src 'self' blob:; report-to csp-endpoint;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 20 Nov 2025 11:19:05 GMT\r\netag: W/\"584-19aa0fd4828\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 6881627\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buPAy2wYkQvIgkWyM%2BCraeU296YfJSoaHM%2B8WO10wTixPTXNy9gVwTec7T4aFRRgdKIn9UFtivFU2epf9iaJlM4yZedIHFf9uqMzLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30bac6ec124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecd7ff238fabcb68943e77bf45b0bd28","sha1":"8d91aa4a65d985edd864cf7c115aaf24c060f385","sha256":"c61e4efbf036b54d3980ee49a71d773f44c57d8038b2e1f200d32418fb31274d","sha512":"24632f5a6425c4e2eaac4ff6751b9a2ab584bdff3cd9b29fc4b2f1d2894fa46418433919efbb8a51289f7c65ea7ae4812b3d3b469ee93d25d3484cecf7d19bf3","ssdeep":"","tlshash":"4f2154a8933472540a67acfcdd3d97dd770b25f7662311c05056a709e4425e47b9c570","first_seen":"2025-06-16T12:39:09.082884Z","last_seen":"2026-04-13T00:20:37.322552Z","times_seen":25,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/33aef96f826b6f2a.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/33aef96f826b6f2a.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023693693\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:36 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-source-app: legacy-pod\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 11 Dec 2025 13:00:54 GMT\r\netag: W/\"97a-19b0d800b70\"\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 5565280\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FtFPHaFOU9COldcslzP2XvqC%2FKdXRiNz8mmHbz86okKVpaysLU5zfHV2s%2BBbp0eL4vJw9PJh0GIRpKunVganeZvN8a9kLosXMigdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f2d6fc1ec124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2426), with no line terminators","md5":"d8d2ff19237e4aad47a659230b0e4129","sha1":"018e4e1f040827abf21911a13430d3403885e434","sha256":"1754a9a210c12fd3b17e86b5013db1254dc08d2faf84b63e2bb1bf5bdbf78ed2","sha512":"c6b3a8feaa3ffc1d5a9fa05ff8dd0165c6166db95edfff963a70e891d8e592bc3a1802568f5c6e7fa62025e81fdd8bae1ab92a1d8f14f8bb22ef164e3f19aca2","ssdeep":"","tlshash":"17410f335270712db42ba7785791458d2068d01aaf1f53e9ed22b639a1ce29339712ee","first_seen":"2025-11-18T09:10:19.319982Z","last_seen":"2026-04-13T00:20:37.315807Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/cec98bae3d0043e9.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:39.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/cec98bae3d0043e9.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4473,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4473), with no line terminators","md5":"0e1cb4563c01b879df922ac731f343d1","sha1":"55c81f3789e6603618985eba5d4448452a151cbe","sha256":"c3b636d825c584be8a600e25e9979202a3a38b0d7cbec3abc3c50beb90e27e17","sha512":"897325e8f562304455201dc7d9d74cd2f8ffc03d7ba538932a2f9c826b7ab3a7d6ec16166876e11ce13f3d9fb770545736c15f5509bebf7775ba57bae4d0eb63","ssdeep":"96:wmqHJFAQ8QaNXVyTeu03gLyTUZJNeMquVyPPCxrya03sE:EHJFDpaFVBu0QEmJNOuVVd03sE","tlshash":"a191a965f189617b132bc1bc8841fa23b388b549db641fe77f628054b68c6c32fc9663","first_seen":"2025-11-18T09:10:19.318225Z","last_seen":"2026-04-13T00:20:37.32679Z","times_seen":21,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changelly.com/_next/static/css/2a0b9930f773f000.css","fqdn":"changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /_next/static/css/2a0b9930f773f000.css HTTP/1.1\r\nHost: changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nCookie: Promocodes_ABvariant=default; SmartRoutingP2_ABvariant=default; FiatFromIP_ABvariant=new; SmartRouting_ABvariant=default; TransactionWidget_ABvariant=new; wtpExperiment=502; first_visit_by_promo=1; device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; ipcountry=NO; time=1771023702859\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nset-cookie: device_id=ca1608aa-0b1d-4bfe-977d-10df29987f4a; Max-Age=32140800; Domain=.changelly.com; Path=/; Expires=Sat, 20 Feb 2027 23:01:44 GMT; Secure; SameSite=None\nipcountry=NO; Max-Age=2678400; Domain=.changelly.com; Path=/; Expires=Mon, 16 Mar 2026 23:01:44 GMT; Secure; SameSite=None\ntime=1771023704680; Domain=.changelly.com; Path=/; Secure; SameSite=None\r\nx-source-app: legacy-pod\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nx-nextjs-cache: HIT\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6k14CMa04jExSHGiTrPtO4iBhOEL1arIpeYPzVZnn5%2Bd4Qv24COAr5xtT0c2E%2BlxqbxsEKGx9kpe6RfGumbUAOLubZ2K%2BzY4hmwOWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f30a0984c124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/ef82f4af39354feb.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/ef82f4af39354feb.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:50 GMT\r\nETag: \"25e0-642355eb6c480-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3004\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9696,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9696), with no line terminators","md5":"bf5fb6361d0de46fd42fcc0d2c4342d5","sha1":"8c8b43523c4f19122b63b4cbbc9048ffea886651","sha256":"cb42bad6cafd2ab03f7a52899938d29b87f641a60fa3dba8ceb0fc417249fa7d","sha512":"bf047d45e37cb7ab4dd5d044991f26a73562e0bd18f60bef8e1536c2d3a1283263702f1ebcea0ec8998fd96722c539a8e78dad179fd94b58e0a3c703be0e3982","ssdeep":"192:8/ffUE2wnPQ6GLMWMXDeWNLu0YIC4mV8YNjIh:WfsuGLMWMzekLu5IC4mK","tlshash":"bb12d7ae9f0081f9f81bca5e53dc815c442cc263df069d7ae651a41cc7c7aa903a3da7","first_seen":"2025-11-18T09:10:19.334805Z","last_seen":"2026-04-13T00:20:37.31771Z","times_seen":21,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:44 GMT\r\ncontent-type: application/xml\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\nx-amz-request-id: 1893F0AD1BC1AB3F\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: block-all-mixed-content\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.changelly.com/icons-colored/usdtbsc.png","fqdn":"cdn.changelly.com","domain":"changelly.com","tld":"com"},"ip":{"addr":"172.67.69.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changelly.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 09:29:39 GMT","end":"Wed, 29 Apr 2026 09:29:38 GMT"},"fingerprint":{"sha1":"BB:19:43:5B:92:5D:8D:1E:D1:DD:FD:3C:48:ED:8E:56:FF:7A:3D:64","sha256":"D0:7A:47:C1:33:67:E4:BA:90:DE:F0:75:D6:EC:AA:F8:C7:22:26:AE:05:04:26:C3:B1:BE:E7:8B:62:F4:C3:5D"}}},"request":{"raw":"GET /icons-colored/usdtbsc.png HTTP/1.1\r\nHost: cdn.changelly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1240\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 12:55:32 GMT\r\netag: \"698b2ac4-a6d\"\r\naccept-ranges: bytes\r\nexpires: Sat, 14 Feb 2026 04:52:24 GMT\r\ncache-control: max-age=86400\r\ncf-polished: ok, orig_size=2669\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 286;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 65349\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxqDvrcEfPfYT3Q7g1SFNc7x5jftVtad0HSh6zcCZnojjCoUXSF%2BnguWYGJC0r3zj5yjT2SGn%2FlSY77zYPjnfGwl9%2BT8ihjENzBepHbHdIg%3D\"}]}\r\ncf-ray: 9cd7f2c6cd0ac124-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"00902f51e686f522e3c15dcdcb5b9058","sha1":"8090c36521dbb61fc99259b482b7a38273507e50","sha256":"844f4263b7de02ee383226aac763afe148d37549fb0438d2ab1a76abae37851d","sha512":"991989734fcc73ab1fd178b072b7e0cccb9ed38ca95b26b88159498fab7c53ae98db0d17c5a5411dac08c90306182033f3a1cce29d7cc1354f98a0e69cd55551","ssdeep":"","tlshash":"e221e78e457878b18a181f2b8a8f3344feab0a621d253b227c0900697e212d3fac71c0","first_seen":"2025-11-18T09:10:19.296271Z","last_seen":"2026-05-09T23:57:36.688813Z","times_seen":23,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":284,"dns":0,"connect":9,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/cec98bae3d0043e9.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/cec98bae3d0043e9.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:42 GMT\r\nETag: \"1179-642355e3cb280-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1180\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4473,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4473), with no line terminators","md5":"0e1cb4563c01b879df922ac731f343d1","sha1":"55c81f3789e6603618985eba5d4448452a151cbe","sha256":"c3b636d825c584be8a600e25e9979202a3a38b0d7cbec3abc3c50beb90e27e17","sha512":"897325e8f562304455201dc7d9d74cd2f8ffc03d7ba538932a2f9c826b7ab3a7d6ec16166876e11ce13f3d9fb770545736c15f5509bebf7775ba57bae4d0eb63","ssdeep":"96:wmqHJFAQ8QaNXVyTeu03gLyTUZJNeMquVyPPCxrya03sE:EHJFDpaFVBu0QEmJNOuVVd03sE","tlshash":"a191a965f189617b132bc1bc8841fa23b388b549db641fe77f628054b68c6c32fc9663","first_seen":"2025-11-18T09:10:19.318225Z","last_seen":"2026-04-13T00:20:37.32679Z","times_seen":21,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/en/?email=","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:01:44.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /en/?email= HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":628151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3001), with CRLF line terminators","md5":"1d459f335d27e72a2d56b8cb3f2c509c","sha1":"3823c846118f51bf88afa82e84714ad1ba6137d4","sha256":"166d38c8d3e5bf964b8210b8dfd04843aa278c819ddc21134fe032cc8200a0b1","sha512":"848bb9ced9bdb6522867ef4b9142d42b233c68dc01167fa096e326f10b82aefc1b715074d683ad7d2263c56fa25f34879e7b6c1b1d557b618eca4de6b66328ce","ssdeep":"6144:TRxHqAJ8J6TFNAqDtVwmRzvo+ReNlV/Ezw1nGXu1cq7xlponWcIHlwe3+cIb9pTp:/KFPb6D0mw8tiW","tlshash":"9ed4d8a515e81c7e4c6362d2af417646d2ec42cbd21a8c9b77ecdbc21bf2ee64523314","first_seen":"2026-02-13T23:02:10.580271Z","last_seen":"2026-02-13T23:02:10.688892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/2772de317f07e534-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/2772de317f07e534-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/?email=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 07 Oct 2025 16:58:04 GMT\r\nETag: \"3fd0-6409478a9df00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 16336\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16336, version 1.0","md5":"c9799d10d2244c347708a80194156669","sha1":"365833cc5bc967e58537294063574fcdd8bce526","sha256":"c26c8b74d570cc06f9790b21bc4a81c86ebbc63809c1ccd6f0a3d1e86fc68565","sha512":"bf28534767bb39794f03dc146db2d482ccc42e84b576da7c563f5aee135172e05404da681c71cfc9ec346ad1c0317ccc9314116a07476e65f92e8cdfa993ae9b","ssdeep":"384:1iYFevfys/a9G1M9w8lrmbchJtz5sI+99Rwyci:1iYkSdG+VJttXMz","tlshash":"4f72c06980081b81bc761a73a373756e641e7b6bce196d2164073d0fbb30c58dda8b9e","first_seen":"2025-09-07T20:05:59.477196Z","last_seen":"2026-07-21T23:20:07.117049Z","times_seen":309,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/6b49df2ed055265f.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/6b49df2ed055265f.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:18:44 GMT\r\nETag: \"482-6423557342900-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 427\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1154), with no line terminators","md5":"8b8554d88732910aaadd633af363554d","sha1":"3f8d41f6efa0775e215fc6ba03885b61a189c3a2","sha256":"50a89f43ca5b300d89d61b21d6e7988005246d3041a5c32cef353526a25d9484","sha512":"51bcc2cd74fbc4792fcd30d3935fab1b6fc6822d1abe8949c3d2a3159cb3019474d73b87bed4a49e1603544b8677d34b5cd1a4ab39b3c538a11bca6c4a542203","ssdeep":"","tlshash":"2621d7216070489c37ad215dcfce54e61c689446247c58287b7f809b38c92e99bbdd22","first_seen":"2025-09-09T19:03:18.444669Z","last_seen":"2026-04-13T00:20:37.321989Z","times_seen":27,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/css/a8489eed8bd9e5a6.css\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 07 Oct 2025 16:58:06 GMT\r\nETag: \"6000-6409478c86380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 24576\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-07-24T20:14:11.932046Z","times_seen":10421,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/favicons/favicon.svg?v=5","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:45.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /favicons/favicon.svg?v=5 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:45 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Sat, 01 Nov 2025 10:39:28 GMT\r\nETag: \"7d6-6428618b79800\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2006\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da7dcc2ea2630cdcda5d917d277b4605","sha1":"4e4a1e50e3c4de4376777002bb692e74c9d72e34","sha256":"579b8a6b80759288298ac4ea500cad000f0a2ec830f0f0dec3d4fe5aaa875260","sha512":"6b83372070299621e14d5729a55b1c0b1d947345c9264638ea22556ca474065e269b6ee1e8decba479272de36f89d63e31a40a33da4d8c7ccd816cb20a9f67ce","ssdeep":"","tlshash":"364174f266dc45d0c70abb74d72a4c737ae738f57f8387c952c56ac06a522695c4cc48","first_seen":"2025-09-09T19:03:18.411658Z","last_seen":"2026-04-13T00:20:37.324718Z","times_seen":23,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.simpleswap.io/images/currencies-logo/btc.svg","fqdn":"static.simpleswap.io","domain":"simpleswap.io","tld":"io"},"ip":{"addr":"185.104.209.24","port":443,"asn":209671,"as":"Qrator Labs CZ s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://changely.cfd/en/","date":"2026-02-13T23:01:33.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.simpleswap.io","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Nov 2025 00:00:00 GMT","end":"Fri, 25 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:5F:71:F9:5E:04:12:D8:19:C6:45:85:74:BE:B2:CC:CE:61:09:36","sha256":"FD:BC:74:DA:D6:AE:B7:1A:9E:2D:6B:FD:94:87:B8:40:04:E4:07:8F:B1:3F:43:25:26:3E:53:EC:E4:BE:F2:FD"}}},"request":{"raw":"GET /images/currencies-logo/btc.svg HTTP/1.1\r\nHost: static.simpleswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: QRATOR\r\ndate: Fri, 13 Feb 2026 23:01:33 GMT\r\ncontent-type: image/svg+xml\r\nx-amz-id-2: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\r\nx-xss-protection: 1; mode=block\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\netag: W/\"4bae6a37ded04d1a71c1c035f4aa5a23\"\r\nx-amz-request-id: 1893F0AA8B00D047\r\ncontent-encoding: br\r\nlast-modified: Tue, 25 Apr 2023 13:43:39 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncontent-security-policy: block-all-mixed-content\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2142,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4bae6a37ded04d1a71c1c035f4aa5a23","sha1":"3939945d1ee316841ba4cbff66026e10798d81d4","sha256":"445b47abd56e283946f651291e0536b0d2c8724223160d3b54976fe30abeef6f","sha512":"99de9d71c98d65d2f8e72afcd9fd0cde81b7bbdec474bbf0fab4ef98fc98deed6ff90121b543beb73ff25eef8e14296c53a38f7f1860cf9df8831f66dc2e1a30","ssdeep":"","tlshash":"404162e6b3d4f2d0e5428330d421c6b9b69f34b6af6ce74882804fa4ac0c24589cddd4","first_seen":"2025-04-19T14:20:06.99876Z","last_seen":"2026-07-12T11:22:16.965513Z","times_seen":112,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":134,"dns":0,"connect":19,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/570280955202ed2a.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/570280955202ed2a.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:21:24 GMT\r\nETag: \"12a8e-6423560bd9100-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 14765\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":76430,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"2b0c3499009534ae5d9925c54deb1352","sha1":"414e63504858f5672750744564e5f1e1a60a3771","sha256":"eddc59d286e4ede62379be5edd6ff94150d23f21700c4b6fa9bd1bc779166a13","sha512":"5493828c3e42402c3abfd648996726c2de20417dae394e0b3594837b581b20374997e7f1de3983e60965ee48c41e045b771e9e6fae1222f75b6c106e521395d0","ssdeep":"1536:G5ls4h3kRfTL8Foku+D+FC/KxOoL3tB4sMrE1gNi8Ih1hXhY7CE659nX9/R18dA9:G5ls4h3kRfTL8Foku+D+FC6YrE1gNi8o","tlshash":"ec73b75fbb17113e6c3781b1c2e0bedc711af140df262aeafa2255210ec57f50d6a628","first_seen":"2025-11-18T09:10:19.333178Z","last_seen":"2026-04-13T00:20:37.308707Z","times_seen":21,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:01:33.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 13 Feb 2026 23:01:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nSet-Cookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; expires=Sat, 14-Feb-2026 00:01:33 GMT; Max-Age=3600; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: /en/\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":628023,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T19:48:57.869635Z","times_seen":17511358,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":124,"dns":71,"connect":25,"send":0,"wait":30,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/css/a8489eed8bd9e5a6.css","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:36.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /css/a8489eed8bd9e5a6.css HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://changely.cfd/en/?email=\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:36 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 28 Oct 2025 10:20:26 GMT\r\nETag: \"2123-642355d488e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1308\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8483,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8483), with no line terminators","md5":"635e1dfdf14ef4ce5f8dcf8539ce7964","sha1":"102a6695c8d1462ec480d0abc368effe774d1b1f","sha256":"5c1956c247457f31620cf4cee2b9c424d118a6888155ab577420b6a48a1ac343","sha512":"c81e07ba44a68c2f18547662e1f5549ba52c3c53be1a515bacf02a76609d9e8a1db47e3a9466dc533995810721e488e62bfa56c29f62b45b0998a6fd1fe5aac5","ssdeep":"192:q3txBPh+gYvqxCVlDEJYJqx5u+crJY8qxsv/paJYQTo9:wHW82Ot1cQTY","tlshash":"e002ab20801e909ed576bcd332c93f232979541196d04d1aef6c89a8dedbc7733d5b68","first_seen":"2025-11-18T09:10:19.299826Z","last_seen":"2026-04-13T00:20:37.32037Z","times_seen":26,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/2772de317f07e534-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:39.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/2772de317f07e534-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/?email=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16336, version 1.0","md5":"c9799d10d2244c347708a80194156669","sha1":"365833cc5bc967e58537294063574fcdd8bce526","sha256":"c26c8b74d570cc06f9790b21bc4a81c86ebbc63809c1ccd6f0a3d1e86fc68565","sha512":"bf28534767bb39794f03dc146db2d482ccc42e84b576da7c563f5aee135172e05404da681c71cfc9ec346ad1c0317ccc9314116a07476e65f92e8cdfa993ae9b","ssdeep":"384:1iYFevfys/a9G1M9w8lrmbchJtz5sI+99Rwyci:1iYkSdG+VJttXMz","tlshash":"4f72c06980081b81bc761a73a373756e641e7b6bce196d2164073d0fbb30c58dda8b9e","first_seen":"2025-09-07T20:05:59.477196Z","last_seen":"2026-07-21T23:20:07.117049Z","times_seen":309,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"changely.cfd/web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2","fqdn":"changely.cfd","domain":"changely.cfd","tld":"cfd"},"ip":{"addr":"62.60.226.213","port":443,"asn":215939,"as":"Valery Smoliar","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://changely.cfd/en/?email=","date":"2026-02-13T23:01:44.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"changely.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Feb 2026 05:45:52 GMT","end":"Tue, 05 May 2026 05:45:51 GMT"},"fingerprint":{"sha1":"F6:C6:F9:14:6E:DB:2F:1D:65:B6:FB:EF:BF:25:80:5E:3C:6C:5D:1F","sha256":"37:BA:E3:B1:EC:B2:70:96:3A:D4:CA:37:23:24:67:33:63:AB:BD:29:FA:E1:1A:E9:CD:72:94:DA:B1:38:BB:8E"}}},"request":{"raw":"GET /web-assets/_next/static/media/4c9affa5bc8f420e-s.p.woff2 HTTP/1.1\r\nHost: changely.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://changely.cfd/en/?email=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m6c950n88n01lq2fjcc55scjfi; theme=day\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 13 Feb 2026 23:01:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLast-Modified: Tue, 07 Oct 2025 16:58:06 GMT\r\nETag: \"6000-6409478c86380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 24576\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-07-24T20:14:11.932046Z","times_seen":10421,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"changely.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}