{"report_id":"2963004a-617e-4cbd-b704-20bbc12d82a2","version":6,"status":"done","tags":[],"date":"2026-03-27T23:48:41Z","url":{"schema":"https","addr":"exchanger-infinity.com/","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"104.21.54.238","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"exchanger-infinity.com/","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"title":"exchanger-infinity — онлайн обменник -","dom":{"size":126570,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"5badb2162877b2f4d4e78e0a296b6d63","sha1":"fdbeccaba9862522736e410e88971201996b1803","sha256":"112676495d03f7424c218f6cce2c4b712b3f831c6e177a567234170269508e2e","sha512":"587e20009c043131f8627bb894870acef6d7ce6b79ac4a5fba63a089b887bcf86db3df8c8e5f21a321cd85f9ef04c23db8c6b30ebf5d697ce552e9743a05c32b","ssdeep":"768:sZdapzMgwvnEKNA+mk0XoKAELgju9GghIZLh0NLlY0txEeRsqvDgelV9EoO/MdJd:capwgwvnEKA6HC","tlshash":"30c3cdb0504d5c77014777d511a8bb0e508fce7aea37a4dbb3fb09b496c2c906627ea2","dom_hash":"domhashcf9564de7255714cead3c3fb32e95fed","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"exchanger-infinity.com/","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"104.21.54.238","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T23:48:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":7,"received_data":278885,"sent_data":3947,"comment":"","tags":null,"fingerprints":null},{"fqdn":"exchanger-infinity.com","ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-17","domain_rank":0,"first_seen":"2026-03-27T20:45:08.130966Z","last_seen":"2026-03-27T20:45:08.130966Z","alert_count":0,"request_count":20,"received_data":3819227,"sent_data":10655,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"perfect-exchanger.com","ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-27","domain_rank":0,"first_seen":"2025-09-03T19:06:14.119554Z","last_seen":"2026-03-27T20:45:08.709299Z","alert_count":39,"request_count":13,"received_data":702796,"sent_data":6193,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":47154,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c32d61d413a51ceb45fcbd9e1662275","sha1":"63cb75972fcc342f64b4fb8588d50eceedd75276","sha256":"796f5591516c92da85711d76b252e83d51d13db1bafca9909196a97d1a959b45","sha512":"28ae3e885a50850b2b54ce99ee44f477ffb8ac1f5d7a748784d97b7f98eb73a057bde3db6586d999fe3f77ded57ac08132761c583a395b3803418f3bb1a8c88f","ssdeep":"96:MQnEzSYEwYE8n+6fTY3Hl1QNaYpReHuXAua/uotwLaQSZCKG5EV5LWvkf8xEHHUc:MQnhYbYbZWHlAL5u5Jnso9KCI72","tlshash":"1d524294b31c39ba51f3302689792665dd2ec177c00184a1fd7d24f0bf3096da7a6ead","size":13895,"data":"","first_seen":"2026-03-27T23:48:45.884937Z","last_seen":"2026-03-27T23:48:45.884937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1828247e7d73542b9227a0087213e2c3","sha1":"2f00addb017da60566e3ca8314ac2213a5bdaf45","sha256":"7299291b90162227d949c4683c7f118c3ee3673455d9de62ebfae1058abe74d1","sha512":"f51307caf46b6a7d920778fa1f98d8b2ede2c0afa49703c22fd70a6dec1eed08b7e4930bc84933a8792b1f6d1b6214a53419ccf2826998e886f671960058a42c","ssdeep":"","tlshash":"ee3199817654a52c71fb30ab657f0104ae28862799020850f8bea9b12ff5356b7f2c5e","size":1852,"data":"","first_seen":"2025-09-03T19:06:22.190121Z","last_seen":"2026-03-27T23:48:45.873562Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba23883b51f5f372d28755e199785526","sha1":"a4082cd3950848f2b1b6125a509a8b028f4dcf31","sha256":"f87153921ae6b43428f4cb607b862453667493c5cbf8eaded2c378c225e9a53f","sha512":"71588a059b301f6df5522e776a91673f37a6e29bc6f269420eb4b266c90313d38ada0c9477f2f4f1ed400b4c23268757619d7099712e36298dd5ddcc586ee369","ssdeep":"3072:S4qsOZ8ddulN/6l+u3kisiHIwEPWqoH0tJ3HZ0iGlSnxxdZ:4ZquVfXJOiGlSnxx","tlshash":"5634e84c7241353692efa265102f260b7233a55da606805cb43dc9ee9e7de0471bbfbe","size":237802,"data":"","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-04-22T12:17:12.73337Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93637,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-04-26T09:34:53.05711Z","times_seen":20792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08a24670beb2eae7ef79a6d5ac23874b","sha1":"eca8a1978457941622833130e92b9b274e2b3a36","sha256":"3a16fd80d67008f1c947cf93ebb20e2af2ed1a6317e194d35ed15046076c4211","sha512":"3a2e9c8c3bd0a0d139fffcd0a4bf4f21b005838236868b02f345e7ca8a3431060e86f60775fbe0a009bf011d7fbe25e88aea3fed4a492330ae69b8181ad33cf7","ssdeep":"768:Kh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV5uMwMGM+zA:eiwDM1YuW+WkeBEfcPZ079SjCOoliMIj","tlshash":"e413a24a79eb12a2192334b94bef90497739d0231108dda07d4c53d0afd4db4a6fafe8","size":43892,"data":"","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-04-26T02:37:42.646291Z","times_seen":1109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-26T10:01:51.115482Z","times_seen":313533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exchanger-infinity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 18:12:06 GMT\r\nexpires: Sat, 27 Mar 2027 18:12:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 20176\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-26T10:02:51.531846Z","times_seen":222882,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":87,"dns":1,"connect":30,"send":0,"wait":35,"receive":13,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exchanger-infinity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 18:12:06 GMT\r\nexpires: Sat, 27 Mar 2027 18:12:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 20176\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-26T10:02:51.531846Z","times_seen":222882,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":83,"dns":2,"connect":29,"send":0,"wait":24,"receive":11,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/uploads/favicon.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:23.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/uploads/favicon.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 145547\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 07 Nov 2025 15:03:55 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QykcoE0VZdAcjSUKO%2BpdLpGLnDmnNiNmciy57itGb87yTRX%2BMRsqyjVTQ48twHOEsfb4t3w9UUeqt5ezjRA2%2BwBwl%2FH8O3q9G6PsYNAbfGo2wMG7W3NoWxb%2F2lf7akk0uY6mGKgoImbg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e324921294cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145547,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"08a952de8a1e3e1533e34de3c1b6c518","sha1":"eb95184e63251138d00d973919c3ed880f7d363f","sha256":"d0ce2c3030c848d08cbf7b18b2db742bfe7b028cda94c64c08898c7727960272","sha512":"e52913448900dde8ff123067f3918a9b3720ef3cbedb35ed81bcf6027926304d60dd2ccd057b49d6a5dfe1feb4ff02fdeae890bb396a21d13b50d633efa8d63f","ssdeep":"3072:AXWuPgyHiRRrcWj2M2yTtk7YMOONfu9OajD9U:6FHGRgWjrVDMhunJU","tlshash":"82e312e8288042f1983cf150d5e199e69fb35706c289de7991dc2537de2f90bdebda02","first_seen":"2026-03-27T20:45:13.680804Z","last_seen":"2026-03-27T23:48:45.862572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":911,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/uploads/backg.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/uploads/backg.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1290757\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Nov 2025 15:05:49 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYAVbUKb2cO9CyACfCD11jNXBmtN7FkuzoVjHXXdaKNUoTb6FQxnlhlLyPKqV1uF%2BHoNUdR6K5qRBCVz9z8v28IBJeXflm93NFH7ecPVVUuUJkmQ1C8B7U1D5GtwBxhVFhLZv3keS5gG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3249186931b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1290757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1800 x 1200, 8-bit/color RGB, non-interlaced","md5":"589ca624dd0ce3eb0cb905c1958a602c","sha1":"48fb028e7c7e195bcfce08ae1566507b0aaee2c3","sha256":"f7af7103a7f006661c4934b32bf9b42ada567d0528715216462c146bf484d7ac","sha512":"5045e6621fb1cb588631e1fe97776bb5d4cd4953bb164be0e46925293893da36d0d17c12d7843b53a98f344525447525977c2a2979208a2ecb66f666c112c3e5","ssdeep":"24576:1RlPCgPgPU/rI91QSv9A2iQyA7CP5ulZfO/CT:1nVlzIHQ89ARQTl","tlshash":"d32533a5c76f650b2edfbaf05c561542c1378effc18b2116e27a2056ccb788412963ee","first_seen":"2026-03-27T20:45:13.666228Z","last_seen":"2026-03-27T23:48:45.86518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":899,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/steemBNB.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/steemBNB.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 113794\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 13:09:38 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hkUazeDfkMlgDCjFjHpE1jxO18MX6W%2FhQXxef7IpkH0K8hTgvKn0oqJU9FEB3t8mUFl0Ko7BQTEGeMsFUFZoqgZy3oNW1s8dG5AtARVSm884sJopskpHyJti6TwDCc8e3gn4FIRibQ%3D\"}]}\r\ncf-ray: 9e3249192bb35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b30d67bb8324b0a2b5585e348bdbc130","sha1":"700290d2ec94b4a93a3c9ea82f4c5a25dd22ed0e","sha256":"0a47ba536dd9f4a8e93a78b52e20881052fc1591ddca19ab102d485e5f54c54b","sha512":"dfa30163e1dbea5fc4b18e973b509a4654c1f09de63131edc32f786b0cc2f0c93c8acd0f5d93017858d7d6ef1e8a29ae6c69161d8c1b0ad2575a2ef7d0ae3396","ssdeep":"3072:iR6Js0uqb1QPZkLj9IEuqjcFFkhzwC5sOXnTS1aP64EPw9fI3A5/:iQsi1Q0+Eu+eqzw3OXntQygQ/","tlshash":"b6b313462c44075bae05365da9e224b73a4f1f1e98924765fc183c9e0eba45301fee7e","first_seen":"2025-06-22T10:38:04.429783Z","last_seen":"2026-03-27T23:48:45.867432Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1102,"timings":{"blocked":66,"dns":28,"connect":1,"send":0,"wait":926,"receive":8,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exchanger-infinity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 481333\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-04-26T10:13:24.267434Z","times_seen":8605,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":86,"dns":1,"connect":28,"send":0,"wait":35,"receive":2,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exchanger-infinity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 481333\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-04-26T10:13:24.267434Z","times_seen":8605,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T23:48:18.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://exchanger-infinity.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://exchanger-infinity.com/wp-json/wp/v2/pages/151\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://exchanger-infinity.com/\u003e; rel=shortlink\r\nset-cookie: PHPSESSID=8c83acce99216548224849349ff1f097; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00jPVkzo6JPW5w9zULmFgEK2puPAhD8MUV6wkQWHYCKPtkddLd%2BSf2nMyy3SMtMMJ2FB5UEiZ9Q9ia4vGRTrFVlIZSI3cBISrWtAw91VUSJw4mwg0Q7r5MJer0xdowl35WrzHdmyjJT7\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e324901b82f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":129543,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"fd778d789c0d98d722fd9d902a5476cd","sha1":"58bd748aab58020da2b12fff5d20407353019c10","sha256":"95bf615a11aaa4c42225ac84a4014ae25e2cedf157e895d98c4000d4f0bb87bf","sha512":"a4ace1ede4cbda1b51fdc274b287c566c1a74836bff7e8a368ba4139f9e5f20c8ffef82be54ab5fd18c171fc5357ba6b88016429b676031b523272f8083daeb2","ssdeep":"768:yD2ZdapzMgwv16noYusKuQd9XwHe3AQA7SRpPgxUDCehvOehiuxf0spVVKweFaF9:xapwgwv16h671","tlshash":"51c38eb1704d9877010777d70178bb0d908fce3acb27a497b3f92ab796c2c506567aa2","first_seen":"2026-03-27T23:48:45.870114Z","last_seen":"2026-03-27T23:48:45.870114Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1892,"timings":{"blocked":44,"dns":30,"connect":1,"send":0,"wait":1800,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51 HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2xtoC3BHYB8VAYhUgQi2KQj9xTULMAr9M2KvGeR07dC4Oj79uatD%2Bzq%2BijmEYod0vw9Dar8uFtAdDyz6yCKseDUqkW%2FCOXh3j3GIYAu21CRJEL%2BuFmcsUDsbmvhgDV5B2Qf3XTcLAFC9\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 27 Mar 2025 08:17:41 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e4904b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43892,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"08a24670beb2eae7ef79a6d5ac23874b","sha1":"eca8a1978457941622833130e92b9b274e2b3a36","sha256":"3a16fd80d67008f1c947cf93ebb20e2af2ed1a6317e194d35ed15046076c4211","sha512":"3a2e9c8c3bd0a0d139fffcd0a4bf4f21b005838236868b02f345e7ca8a3431060e86f60775fbe0a009bf011d7fbe25e88aea3fed4a492330ae69b8181ad33cf7","ssdeep":"768:Kh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV5uMwMGM+zA:eiwDM1YuW+WkeBEfcPZ079SjCOoliMIj","tlshash":"e413a24a79eb12a2192334b94bef90497739d0231108dda07d4c53d0afd4db4a6fafe8","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-04-26T02:37:42.646291Z","times_seen":1109,"resource_available":true,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0 HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjryyVIaLe07orQ8%2B%2F2imZBi7aFO8nVu88uoFAyoNXUip2A8vhze2dcgMlHSib4GTpQupmVTs1s%2FjC7usfBJ3pMpuOcXe6aRgi%2FePWRR84N7g71Q3OO5QK1aBQZ8Zi7VdKoDQhUTKtPk\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 27 Mar 2025 08:17:41 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e4905b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1828247e7d73542b9227a0087213e2c3","sha1":"2f00addb017da60566e3ca8314ac2213a5bdaf45","sha256":"7299291b90162227d949c4683c7f118c3ee3673455d9de62ebfae1058abe74d1","sha512":"f51307caf46b6a7d920778fa1f98d8b2ede2c0afa49703c22fd70a6dec1eed08b7e4930bc84933a8792b1f6d1b6214a53419ccf2826998e886f671960058a42c","ssdeep":"","tlshash":"ee3199817654a52c71fb30ab657f0104ae28862799020850f8bea9b12ff5356b7f2c5e","first_seen":"2025-09-03T19:06:22.190121Z","last_seen":"2026-03-27T23:48:45.873562Z","times_seen":14,"resource_available":true,"data":null}},"time_used":952,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":952,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/images/marr.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /images/marr.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqViLbGvHt0CYsKj0AXRac2wnnaErjniOZS01R%2Bv%2BbOaqrG4%2B6W6p%2F0ajdNhNF46XJ26eItPYW090rXfN21V0xAY1RphGVwAv6salWQm%2B%2Bcgo6RTNoO8uQLR%2BA1cyLjp7YUQJzDZNxQo\"}]}\r\npriority: u=4,i=?0\r\npragma: no-cache\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\nlink: \u003chttps://exchanger-infinity.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3249188932b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":22725,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"a9fdc7685fd122ff3dae90e487c436c3","sha1":"6e36e888c52a5ea7a7b57ab603add521a4719d9b","sha256":"9293e2a50f3b8b01f912ecaf3f3dd47b2a00a50f65268f863b7c385feeb574f9","sha512":"6da4f00cacb831a9a05fe64e1132fa1b5f56da73a6ec6e4b559c66df1d31c06a933fb4a2543142b36852b192c6a08846c734d43a377fc29a7a0612ed1a410f76","ssdeep":"384:BD/fr3ZdqZUaAWkWMgwve5HTGfAk59W0s6PigjRiLuwwS4:BDTZdapzMgwvXq0s67v","tlshash":"94a26471849a10777a0ed7688260732862a99a36cb02db7533fd319ccf85ef644f765c","first_seen":"2026-03-27T23:48:45.874495Z","last_seen":"2026-03-27T23:48:45.874495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2 HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dOzghVkKcNP%2BZVi%2FKZdvdqIsJyn%2BS2hpIcwhXGc%2FK%2Bm5LfFRph81VaYB5kj4BwhOjiwTPAVA4gKeMz5Bswvo6at5wE4iAPuEQNMNTlZteP3c7wAFUKFGibwnnyg9IHBrvtyTIP%2BHHNd\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 27 Mar 2025 08:17:41 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e3903b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64558)","md5":"ba23883b51f5f372d28755e199785526","sha1":"a4082cd3950848f2b1b6125a509a8b028f4dcf31","sha256":"f87153921ae6b43428f4cb607b862453667493c5cbf8eaded2c378c225e9a53f","sha512":"71588a059b301f6df5522e776a91673f37a6e29bc6f269420eb4b266c90313d38ada0c9477f2f4f1ed400b4c23268757619d7099712e36298dd5ddcc586ee369","ssdeep":"3072:S4qsOZ8ddulN/6l+u3kisiHIwEPWqoH0tJ3HZ0iGlSnxxdZ:4ZquVfXJOiGlSnxx","tlshash":"5634e84c7241353692efa265102f260b7233a55da606805cb43dc9ee9e7de0471bbfbe","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-04-22T12:17:12.73337Z","times_seen":210,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/uploads/RuPay-2.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:21.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/uploads/RuPay-2.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 15047\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Nov 2025 15:57:03 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=daG5phsoFeufTEqu9Y5vhrMOfKXU20e0tA80rZgEKtu3NEVkWwSwANRJDofg31gLCDKEzzd%2BUnW2iEburPuM%2FKD7Qgvtfs%2BInMPFmAQco2K8TC36hTgKDWtkl%2F%2Fw4%2FZj%2B9Ja5y%2BMDmbZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e324910e913b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 60, 8-bit/color RGBA, non-interlaced","md5":"f91a8d5790e2852f7310a40bb440c7d4","sha1":"e4e0e3c8542b1b55e932aa80f4a0249e9ee9f34c","sha256":"c75154d9e5cd8683a2a774d73a23b4dbeffb96d2f6b83a6803e0737e7f3fb00a","sha512":"4335f689fd6359213c72b0059583fd1af6f9218d892bae772e8ad8992e5e3a0d8fc7f2fb6a904ba6034e502000b1cbf66135df0a62091b9e5e87b88b1686832f","ssdeep":"384:NQnpmgxnUQ7pojZ0paTg2Xelnt7t/lJA6ruoilv:mrNC21lnptvATow","tlshash":"ba62c088e0269cf2a71fa85cfb5e8077de6b07d0d1663c2895eadc031838075e5de4c6","first_seen":"2026-03-07T19:28:24.76071Z","last_seen":"2026-03-27T23:48:45.877727Z","times_seen":3,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":905,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/images/tel.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/tel.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1248\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 27 Mar 2025 08:17:41 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIeMiYlpNHIRPrAOCz0vkk%2B1vZHxUzuLDF0VosffDk5opVLp60JSopQqkxDzI8cN%2FZmLNZgl8%2FWTPndUa4u2Z3n81U3rucs6T6iXO6Zc%2BxScp1tDuYFO3SfrAgP9ojScm1v83XBg5YGC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e324918692fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 26, 8-bit/color RGBA, non-interlaced","md5":"ce221021e9bb040489bdce9285081035","sha1":"6e41f87a25d1142471e2cc5db99096124cbc136c","sha256":"ff821416c23568b3f5cfe2d0be63eed995de1bcde4e81c2f60a822bd09a92aa7","sha512":"e20c44fe4b3a4000654ffcdd4e9a6a6c9b04f153f71969f2e53a239b2fe573713c529ee0af1dbb58b78e494df2660021c225467e0d6b2457e01d0207d6cef8bb","ssdeep":"","tlshash":"6321b749fa4444c171a9e88570f790a35e131040cae8b9adadcfc86b2a30b60c235ee7","first_seen":"2023-08-06T16:12:27Z","last_seen":"2026-03-27T23:48:45.878584Z","times_seen":21,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/images/email.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/email.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1645\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 27 Mar 2025 08:17:41 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6a5smbMcrEE5RlQzMLs47FYrgECdJcowsUxmnvaXVSSb4hpMQxIqLnp7dggT60GDTZAkvuI1H0SItaZLYKxa0uexYOjcze250WeSK8l5JG5PxtWAqSVSd8a9LcsNzUc%2FF0%2F2Gm8sEVOq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e324918592db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1645,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced","md5":"de4426fdea7643435b8ce3ab704838c0","sha1":"23788246dd54e212029b346b133292e18c6c3177","sha256":"e4da704204ebc3f637551af1fa0058c7d2a76cd29c5be0ea9673b7cf3c425d6d","sha512":"3e25f6996f6100131188a5a43ac30fa3bbe5032c8c28e486f2b1e0185dc27e2e45f37902617ea8dd775cc1dcc519401e6b1666fbe238e8d017df36555b37f8db","ssdeep":"","tlshash":"2e31ca99b514780296cda54224fd60ae1d2d1c808ac4c5697ccfcb294d341f547956db","first_seen":"2023-10-27T00:01:15Z","last_seen":"2026-03-27T23:48:45.879435Z","times_seen":7,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/steemN.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/steemN.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 89009\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 13:10:37 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8sLYb%2BCE%2FHqh2F7TZVfJT%2B86b1u3onF6de0LVvdoqg4XiIE%2FIvBYZEWLzCMCyMDOoYrDLybjwrByUyZvhMG18XiFi%2B1s9cjPPrZUiJcPm5V68yvYi9TQqpvmSN3BOcZZ%2FFhr%2BpdfDA%3D\"}]}\r\ncf-ray: 9e3249193bbe5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"09d5e76007866efd217f5e86646b4214","sha1":"197f44c7683baad3e3bc5d7a882f0b74168e6887","sha256":"f9b918e3dbbdbbfb04bf7c165f13b6f1ba1c2bac6d92e61d8636e37d86ecc62e","sha512":"85fff0ae40a59ae4291883a11c04258fc35c380f28914138d4c120d38ed663d2282518bca948b6050fa5191031b179bd614059b9735bc7ef64f144513f0a4796","ssdeep":"1536:AyJ21GYKVGnbXywWyiIgsjOu9kn0yI/eqCO5EwK0SUQV4bRr6F03ZH5U:hs5neKiBfn0yO2V1fyV97U","tlshash":"9c9302de996aa025c7bb2c4e448e2e845b63ed30994c15cff0d3267c2225ecbd251edd","first_seen":"2025-06-22T10:38:04.408536Z","last_seen":"2026-03-27T23:48:45.880287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":18,"dns":5,"connect":7,"send":0,"wait":931,"receive":4,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/tlosN.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/tlosN.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 58381\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 12:53:54 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dcAPrOMKSVlBXyAM26%2BbHxokxrdkAQVPqjcQS54Q2iNCMWr4ACW8heCMxesGYKUVSDr66wD2i%2FxHr%2FSk4iK%2B9MoC6CkiMQob5NnRpYvZeRFvCRQm7GkO58iZMqnYcsiZM0Ct%2BL7Cpk%3D\"}]}\r\ncf-ray: 9e3249191bac5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2efe03b0f0a3a25dcd612dc7a999d33b","sha1":"180b87ec12d9d6d7fe02e1794660c5722e752bfa","sha256":"7ad821b5e76b840760c2dab25827514ef917685ba7faa1b9a7e37671a0c12c51","sha512":"1b3bc1d0db3ce4a8ecbba64695489a2a62f2365758190de7806ad795a2ac65b26fb814628eb2602c9ae3d33d5c0d0a6bfb13a38fdf4bc5b043ad67bc4bada283","ssdeep":"1536:IPC37kksl5BOQWV/SLSZDHpe/5npU9UrnaD:D7kksSVHZrM5SJD","tlshash":"8c4302146827dd058d81f6a85bdaa83432a1307d6ba1c3f274f7f22f134c714af84e9a","first_seen":"2025-06-22T10:38:04.466759Z","last_seen":"2026-03-27T23:48:45.881092Z","times_seen":5,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/tlosBNB.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/tlosBNB.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 87180\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 12:49:41 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3W3XnIreLCV%2FV2NTniCy3kDQIFxUxDHlxON8ZJgSjjo5yxAz8WGcndh7r7PUa1yH82BafY9nURFk1DhYY%2BFfD6kHTrsEG7wLXWfSMEKId1kKjKbZplxVFETrQL0SSc8eISfYFpqZNk4%3D\"}]}\r\ncf-ray: 9e3249191ba65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ec45880199042fe18f653c461a8efa9a","sha1":"5e165bf55f144150d8eeb5a1efcc49cb6ef4c7b6","sha256":"be70a61c3e76680804ebe3a8f8b4eca08afb2d2dcd15848799ff1f24accd1e9d","sha512":"5111226d039e664d984f5b56324471da2dd03eca7d89438e0c3ceef72a5468ae14ec088d76c45d68c54503b5f72f661f3151b6148ef63131dd7774edd84c0d7d","ssdeep":"1536:9hC37kks2KbzsEoad5sxvS1BEMMOzdwXtF/AeZ2Lqe5jOKBMeRNmiQhKbc:a7kksrsEjd5K9VqwdyeFsOKmWNmiQhKg","tlshash":"4183021698e1849deab150c1ffbfb9573ed87890a784421071c50dbccb082bb71dbe6a","first_seen":"2025-06-22T10:38:04.392799Z","last_seen":"2026-03-27T23:48:45.881943Z","times_seen":5,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":935,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C700italic%2C400%2C300%2C600%2C700\u0026subset=latin%2Ccyrillic-ext%2Ccyrillic\u0026ver=1.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C700italic%2C400%2C300%2C600%2C700\u0026subset=latin%2Ccyrillic-ext%2Ccyrillic\u0026ver=1.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 27 Mar 2026 23:48:20 GMT\r\ndate: Fri, 27 Mar 2026 23:48:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f26a7ce9efdf3198522588e90722c271","sha1":"a51cf2052c4bf9775488622e223557c380cc4acc","sha256":"7023201ae131168da7538090c3bc8ba1cff47e2b3233842aff046d1814315711","sha512":"bf613ca6d1d3b2efa920368fc16431c72d7cd40e3da15ac58820eb343e8bbd6dc52280af7ecdecf5869d46764736073da8e99f6ec3e5c5eba62d9b3780fd4226","ssdeep":"384:+eO2pXt2tv/qY49Ynx8bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5H:YbPUiCAgkgHLFosL3Jbc2","tlshash":"09231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-17T17:43:28.294801Z","last_seen":"2026-04-26T08:58:18.037997Z","times_seen":1387,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":109,"dns":1,"connect":15,"send":0,"wait":34,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/style.css?ver=1.0 HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhUpFaEgYpj9ZLZIgTD5PQnIdQ5UljZdxjEheINlWs3YN8gTkNmwKNPFKrs71iJwjgPH8Wx8taz7Nz8xFNtsrgNC1zso51R5CdiqfuKYptDfaeW6WkCEwoJAf%2FN7A%2F5Mlmfg0Cve4QAR\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 12 Jul 2025 13:33:13 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e38ffb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40283,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (323)","md5":"12c5806c23b5cee68976adb205cb4664","sha1":"4d72524432e519462e89e4db8b071bb7b40793ed","sha256":"7d8d7c2714b1613a1f4003ac9c5bf84cb39cf4f516bc060854fbce35a49e9833","sha512":"054abba21bba067bd4a9e5a29a8b8f3e09b9f53ce0eb4dd4b0dbffe2f913895f33d1d8cc163d11eaca8fa2023fc237a8abb484202b9759b7219c852eadd447f5","ssdeep":"768:rdAJxamlhioKE37b+WCWej9XAxXiPdu7P6EPkFP0gP4TrPmgUSM+vg7+NWo68N5p:rmUEzSh/piGdub6Mkx0Q4TrmgUSM3WX7","tlshash":"940385227b55305ef61ae0d8ec66a74a831d8133f50719f8baec1138c38d468d4b6f9e","first_seen":"2025-09-03T19:06:22.181376Z","last_seen":"2026-03-27T23:48:45.884114Z","times_seen":4,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":913,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0 HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:22 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D202AJ0uhjPyIeegTfA31q%2Br4s6NBcao68OS86CfWCHaaLG87KHarbqDsDEM%2FJEFgmhh%2FI058a0WHp6ZcYdvDFruQRr4JVfmYOH6QRSqZKdloA1TiRcyEqC2DEnU2ovKXTRWcvJk1AYQ\"}]}\r\npriority: u=2,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e4908b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13895,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0c32d61d413a51ceb45fcbd9e1662275","sha1":"63cb75972fcc342f64b4fb8588d50eceedd75276","sha256":"796f5591516c92da85711d76b252e83d51d13db1bafca9909196a97d1a959b45","sha512":"28ae3e885a50850b2b54ce99ee44f477ffb8ac1f5d7a748784d97b7f98eb73a057bde3db6586d999fe3f77ded57ac08132761c583a395b3803418f3bb1a8c88f","ssdeep":"96:MQnEzSYEwYE8n+6fTY3Hl1QNaYpReHuXAua/uotwLaQSZCKG5EV5LWvkf8xEHHUc:MQnhYbYbZWHlAL5u5Jnso9KCI72","tlshash":"1d524294b31c39ba51f3302689792665dd2ec177c00184a1fd7d24f0bf3096da7a6ead","first_seen":"2026-03-27T23:48:45.884937Z","last_seen":"2026-03-27T23:48:45.884937Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/uploads/1-1.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/uploads/1-1.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 1098604\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Nov 2025 15:40:15 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PENGXMTINFrWFRywTpixueXNyAbkvNwX1SbtgjuUhbihz5iJehf3OhyqxWCBp229V2pJydADJkUrCYToTzAdEFUc6rjESVJ%2BySoBsB%2FMB7SdnP%2FmY4Mx7dLVu1eV6CcPafUFYYx%2FVXQs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e4906b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1098604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"3c3759a2532a737ee05a1ec239136fd7","sha1":"9af7ed82f045b80f877647e2aa4f2240332b2caa","sha256":"ba7b6ac6ac22a4fd142335d29da2156bcfd99f9d96978d5805fe517089cf8ff6","sha512":"50ac69b764d607773d34f9e1d9a54a62f6cd254934f7ef628e32f2a13f769f9267339e853861ddc31efaa0adadb422603726fe7aed42a376704e65c53e4f895e","ssdeep":"24576:3vAmif2UmlEIQ2Ycci0n8ieM6VsgrZI8V8z8A6:fAv2UmlEIQ2YccYivg9Ia8wA6","tlshash":"50252356f96c03fed417b8701022e891a3bcf0de5b5e5ac2a971971d7b069e0e40afe1","first_seen":"2026-03-27T20:45:13.67116Z","last_seen":"2026-03-27T23:48:45.88724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":894,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/uploads/VISA-e1727097337601.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:21.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/uploads/VISA-e1727097337601.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3034\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 27 Mar 2025 08:17:41 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2B%2BBdZSAnffDyNf3FKHoNcufaveyAho652ef%2B9%2FATzqh%2BSJ3DJsfYYAw%2FS0npPXAFLmx3IlPCwwjqU1QmUHAgG4q%2Ftdj%2BEKZ%2BGpTaPsNBUNC4ePiAO1gAg%2BlWzzSd%2Bsu7Y1LDxXePfO8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e324910e910b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 84, 8-bit/color RGBA, non-interlaced","md5":"5a4fa880d8662445af6f9dee2742899b","sha1":"ff94dd6eac7ffbad8bd3c29fc01f45f5bb7f9368","sha256":"120cbf0a1012469aaddfe475dd782053a5f83c169dbeee42970cd2ed04ebc3c3","sha512":"9a6262939191196fcd2f0549585f0a16f396193d449ce9a97e6fa13abaec847b9d85da1da447b78dec5225ae24444a6563897e43ed1eeb225fed78149d2d734c","ssdeep":"","tlshash":"e9515c53d5b751484cc134f2d765cc70b8827b8d27739f0d79a6a00c6437a9d5886a3e","first_seen":"2025-09-03T19:06:22.158593Z","last_seen":"2026-03-27T23:48:45.88931Z","times_seen":4,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":889,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/Snimok-e-krana-2025-05-06-v-11.00.30.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/Snimok-e-krana-2025-05-06-v-11.00.30.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 12904\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 12:43:56 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHvemr9BgC8lrzAOS%2Bcn8FM0%2Bb%2FIxZk4CTjzHBFzl3HIFwazY61%2BSb60576LXFp1v3AoCtn9XKnuMMoGthz4HdMKhqiNTErb375T1Uy6JJgdOCqPT2mmx35kZHRHKWs%2BJ%2FGmN7Ke0KU%3D\"}]}\r\ncf-ray: 9e3249191ba35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12904,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 230, 8-bit/color RGBA, non-interlaced","md5":"4aa4ffd4c18ea7ead9d4d4d4b1765ad1","sha1":"543d0cde8fdbb4a250c4e48f726be4a6beece232","sha256":"6ddccf6e86b298d4dc242ef090276322a77aade462a338b2aed38f2c78e152ac","sha512":"9c27c5a3eeb9b9274c5ada821e275535474e39bfc4e37fb8d0e242378a68e5cc2442261116050bee7a2748c8a13ef8bbe41cde8af6c380e5e4dc864016d1a2dc","ssdeep":"384:B8UpVQrsKNk8itvirpGqzR16oM5a2GuqhB:B8Maa8iNmcAX6ha3usB","tlshash":"8042ce9a9c2f18e7477d0676cc6b8221c2779c410fc7cd5e6a4f12e6fd4621a5e3028c","first_seen":"2025-06-22T10:38:04.44912Z","last_seen":"2026-03-27T23:48:45.890472Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":60,"dns":28,"connect":1,"send":0,"wait":929,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/Snimok-e-krana-2025-05-06-v-11.03.19.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/Snimok-e-krana-2025-05-06-v-11.03.19.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 18290\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 13:02:29 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BG2uFWz5kBSFKoCWw8eZA0XICxTzTsAsBE5YD7pzqAufA19jnZ%2FprRCJGtUNuxFeGz1CknRrSDuqu27CiR1b8MRY6fe6iF0rFwIIqwH8kvm%2FO2rNoGULpA5YWKXcvjKKs%2Fwo%2Bvvldyc%3D\"}]}\r\ncf-ray: 9e3249193bbc5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 232 x 220, 8-bit/color RGBA, non-interlaced","md5":"529ce5b9d1974de17240b1d3e5bb7e38","sha1":"f440cb8ab8fd95c6564ce07593d1d86e4851cec5","sha256":"37e483a8e376edb1cca1aa6ed2346038b15054c69a17d6c649e7623ef0814f10","sha512":"78a37bddc01d3b302483a5559a5713ffdaa80334ce4f0521e6ec60ed74f3f50e642db4ff0d1c90e421b57e56af3cd3d7f0d5c1b39f60622111b069d49bfd6c98","ssdeep":"384:28UpVQrsKNk8vxscMg6lnjnhGiXzyzK7Cbu0O8SlZdRQ3JQBCXz2xsu:28Maa8vxscN6DfXmK7CbgLQ3JQBCX6h","tlshash":"a182d05c55fc372edb64f3a3d6d6958286abbfc86af140127dcc842157c0553b0b3aa8","first_seen":"2025-06-22T10:38:04.44791Z","last_seen":"2026-03-27T23:48:45.89148Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":15,"dns":5,"connect":7,"send":0,"wait":932,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3 HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OgbHz06Wf%2BbY9AtI8Nma0MDTayPeYBVU59k%2F4pRABR3me8zN3towcd3w8Ggl9JY5Tydn8OOq%2BtdDtn7Q4wWAMAuyTfdxs1haGHB5zutj%2BELfTgT%2B3k6Owg8G4SSdCBr9%2Bbx4dvJOvrCP\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 27 Mar 2025 08:17:41 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e3901b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65482), with CRLF line terminators","md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-04-26T09:34:53.05711Z","times_seen":20792,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":940,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/uploads/Mastercard-1.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:21.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/uploads/Mastercard-1.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 7990\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Nov 2025 15:49:09 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YS0CzkBQ9c6nfsPpsaY8iQisfyNJwul30MbXRo2k4AbLVH4FyVdWVWYX9%2BtjF9bW6ssScUjr8fTclMgI7%2BgvxSj%2FVoY8DKebfYGE14TeowSvP94IwJHF%2BrFyLhLrPMA%2FjBrsJzbSsIhg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e324910e911b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 101, 8-bit/color RGBA, non-interlaced","md5":"b37453b947cb19941cca10b74ccf3f16","sha1":"08390423830a5287f1b51571317efa682f4ef3b7","sha256":"2551daedbc9b245ae2473f0fc5a048322c1abae7d6c7e306e9267143a9d7b8b0","sha512":"514651f89a3316c7ef7d27e663cb816db7db95a7fc1a4e121f887571e3e6ce80289d260eea5151350717085f97bafb48a4c87e6529ea311206fd8295417522b3","ssdeep":"96:a2knmWIRowGrgHNtHNYBSAD9OrG8J/a6PvGJ590FSJFKMHDjcX+HQc5tRNkZJvmG:rkngbMNIipcyrYopDjS+HQY/kZJ11","tlshash":"66f17c67ff06bc013b6a1d5599eaa96f42139ac04ec099dabcfbed0b1474076cd089c7","first_seen":"2026-03-07T19:28:24.7953Z","last_seen":"2026-03-27T23:48:45.893339Z","times_seen":3,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":910,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/uploads/solid-trust-pay-1.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:21.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/uploads/solid-trust-pay-1.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 7384\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Nov 2025 16:08:15 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tOkll1PeU3%2B4edbVlXo87mPiwfNL9N45r%2F%2F56DiertVT0mKMfdpvqXw8iYdCdmes2XBWUjZHMU5%2BAg3IjyyqhTLSNpqtBvpI8IXmi8zky0D%2FQhe5QUAVf4yN3XehXAXVBVjOpyVgYG5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e324910e912b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 52, 8-bit/color RGBA, non-interlaced","md5":"bd804123083115385a9a79e5c1fc2131","sha1":"2186e2794c17947bb9cb6b43d4c8bac2f838c308","sha256":"e3ca49cd93f3828fb4b9e66cd8f778658c81c062530c6d2b15200a6c26af7932","sha512":"6cb1475c6ed50da7e49812372cde6d74b0cb60137847afcd9b01caaff1e73a78d239bd527226797ba395f3f7f4876da2d6ab073d9612f8f6e2c4c484cd656e4b","ssdeep":"192:ESnknG8C0Ij/9DBnmeWvZV22r53lHJcY6720:DknG8C06p+x5pJcYY","tlshash":"b8e1af1be105b9825accbd9256ca65934e0743c0f7d4f99adc0dc8513470dbdc34ca8b","first_seen":"2026-03-07T19:28:24.797624Z","last_seen":"2026-03-27T23:48:45.894503Z","times_seen":3,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/Snimok-e-krana-2025-05-06-v-11.02.42.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/Snimok-e-krana-2025-05-06-v-11.02.42.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 16119\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 13:05:27 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSTRRMvKTHQQgYZp5Nvp9pzY4C9lQ8SRvHfPo%2BywOxYJV3QN6yJwlEbHx9lI7DMnOlmbZhz8vtvK04nqgB%2FXhhK17TuoXJUB4kTvSg2ZQwoaQ9BJUY4kkl1V2Q%2F7WGhNb%2FPIhwzvNSQ%3D\"}]}\r\ncf-ray: 9e3249191ba95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 208, 8-bit/color RGBA, non-interlaced","md5":"976d4dd7a715d4c84ed5c9ec03996f92","sha1":"dfcbc79c2eca13a0c3634015fac448618f247c0a","sha256":"a49ab7c58c832cbd6e7cf427346d1d2cd087ab58070e0c33d516a54d1b176535","sha512":"f6bf7dc66e03867fa5f0ea26481ed653c6e6f31f82abdf06e3e65cbad354c55721f9f04b144332b3d081cc61968b657698b3c2fa0b89dff5333e45a6b03f91d2","ssdeep":"384:o8UpVQrsKNk8o/bsxfuS2h4rJKIE4mC4MNE/xLW2grHTIqYlYdij:o8Maa8o/AQS2OrHEwM/xS2kHMqkYs","tlshash":"0772d14b332868bc007583fa6ccc87a4c49e09752edd4686e44f5cbd7a4761e11b2d8e","first_seen":"2025-06-22T10:38:04.407234Z","last_seen":"2026-03-27T23:48:45.895604Z","times_seen":5,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":908,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/Snimok-e-krana-2025-05-06-v-11.02.58.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/Snimok-e-krana-2025-05-06-v-11.02.58.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 15538\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 13:03:04 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wflQgFZSVeuUCIL26Eu6Tcbec%2BuI%2FN2UeJb7%2FFl1Ln0Q80TZHohxnJW5CHiPvKnhjIsAZFRyH1LLXVg93C3035zYpSYbonlLdRTR%2BN1mzxVtIUa7ak11GlqDx%2BJWB%2FmsU1CkIi6DYqo%3D\"}]}\r\ncf-ray: 9e3249191ba85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 226 x 212, 8-bit/color RGBA, non-interlaced","md5":"f4885782c3f681547a92abb7e43152b9","sha1":"f5c7630738494a244955e638b8896bfbd6d33c5a","sha256":"df2f53a3e23e7961ba411c1079c290a6874160eb6d3fa1391ad7837d41df1931","sha512":"16f91c55372773a5fbbdf1a1ceeb623912713f47070fc5c4173fc3ade644d116bfbe271d0bea5fd11ab38e42de0b41d61990b14a020e483377651e2deeb29219","ssdeep":"384:28UpVQrsKNk89sTGuAuo8TgGooDGdBt92ALzwzEyTyInelcMh:28Maa89sTGHyTg/ldBt92W8zEwyInelz","tlshash":"9562c063bb4266d151f30172db86f212527d3e710fa7b241b6cc61b3bfc082958d64b8","first_seen":"2025-09-03T19:06:22.147122Z","last_seen":"2026-03-27T23:48:45.896563Z","times_seen":4,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":943,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/28321.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/28321.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3081\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 13:08:31 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zd4En%2BIqgKO4ep3TIyET0wjOs%2FOIlm3eCLJJQZ7XupGPn4m5E3Bhw7r%2FCjUs%2FpwT7B4q56dBZ0iZbtKuVwopzyQYj68iQAzcp055%2BJlt67qoDV8xCYsU%2F%2F5XVHDE7Auhi0hbKYnT9As%3D\"}]}\r\ncf-ray: 9e3249192baf5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3081,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"da9eb511fdad8b70951e4db84f8a0cf4","sha1":"09d2e523f0cfda482528e851393842f96186538e","sha256":"e9eb2a1f0fb715e10a909ff7682935b234e4174ef3f22118695f533553e315e9","sha512":"7d0681d80472989c5716dab25c86135177ed8c02a759096f9c41e4b8cb3f881e81b47b1e42fa9ff4fa2414a3b5b2a2c611465687ae5aef03631a8703ac818dba","ssdeep":"","tlshash":"9d514da613d23144dc4308339f7a2d6341a698eb49c816ca16ed99491149ebd04ddbd8","first_seen":"2024-12-13T19:45:42.3925Z","last_seen":"2026-04-18T22:55:55.349496Z","times_seen":20,"resource_available":false,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":908,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/5350.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/5350.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 9162\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 13:07:25 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DC0wqerKCrKfPrRXjrSrZg2DSUs6ZsDFN5WpU2WV14F0co0P3Vwm9AgtlNlBiWehes0Ne3TuvaCVCYv%2BOrwfrR66LwYDcKXT2f1hm6TpiEbtHr92DsaaE4pt4%2BsQjsVOC6uiZ8UbXZk%3D\"}]}\r\ncf-ray: 9e3249191ba45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"5c33f25baccc4671449c459eef2123e5","sha1":"998b004e873688ebb96819b84b525f595fdd4b96","sha256":"fbfb7b6139545bb2a0dbd3cf842bc4d3db898054cfdc5969bce31cbc64dc36cf","sha512":"b90f14de4e43d7162ae0b2d43e4f32a7e920c05707fbcc3a3bd05b29ff180d6cbd72c00c52c7cfca21e6a897d405392218b57eb63b2e7e586a2ad2b8d72032ae","ssdeep":"192:/E3UPMgZ9FTd9tfTD3nlETgGaFzmymD7qYwElP10DYVOHDnFNRe5Y8l6:skFZ9FxzcgZmDRzwYcjFNRkZl6","tlshash":"a812bfac993ac603f774405b982713632965ddecf0a1adb895c753f052581ce362359f","first_seen":"2025-09-02T04:32:59.172Z","last_seen":"2026-03-27T23:48:45.898525Z","times_seen":5,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.5","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.5 HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRRwR01qzp1zaxyMYoJLByEu4qyY83f%2FQ6%2F3ZE5Q3qRuRuCK%2FeNVe%2Fx5Q1mR49lLil%2BcUWdX2UxgcFEACPyJUhdGjl56%2BxRJeAIBob6SXs8fpkeLQJSBbcVT0KpSzepH26i6d5TwDcca\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 27 Mar 2025 08:17:41 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e3900b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57765)","md5":"319580d7d8944a1a65f635e0d11e5da5","sha1":"e23bc18ef1b0f78f7010e3c16e4c5e1f333248bd","sha256":"fb3a89cc6347e098063bd15f285bc90411846ddce6f17812364feedab67a67f5","sha512":"743825eaea11208277528e506c115ec786ab060095ae4250c65a9b02fe9e5cb2ac5ac386532486a2678b9615490ce75ba096a9fd2041200989ad07a726b5d9d0","ssdeep":"1536:pZeJWfZglWQg5MG7+qehN2pUkxWLZQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LaU3Pq","tlshash":"51b3614417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-09-10T22:43:30Z","last_seen":"2026-04-26T10:04:44.155278Z","times_seen":13283,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":940,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:21.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 28 Mar 2026 00:36:21 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hiiUNtQOyVRTw14YUUIh1cmKw572JFBv8%2FcnatWFmDcDi3IXl6%2B7lspA7%2B4vH0H46oCO3JTx3pKnz6xPxl%2FmItn4FPqENJ3EOpEOhfskFhSWm9t%2FhVfgHDgR3wRPg0UDZFgAJ2eMasH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncf-ray: 9e324910f914b500-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-26T10:01:51.115482Z","times_seen":313533,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/1.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/1.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2691\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 14:36:34 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1XyaAVMdoNuPgW3Nw%2FvpW3BRGyS%2Bgkkso9%2F%2F6%2BLTG2P%2F%2BpwBlycsMHcV3i%2FjC8ZY0k%2BnstOdOXQu%2BGcagCNSU40jv%2BnBHzQIeDcC93JN1ZQZLsANkDhwRY5BCsBZW0yIH3RJvsFzrc%3D\"}]}\r\ncf-ray: 9e3249191ba75699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-04-26T05:18:11.291214Z","times_seen":21118,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/wax-waxp-logo1.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/wax-waxp-logo1.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 86122\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 14:39:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZYqVLjM%2BV%2F9KLngpRro8g1BBUTojS%2FTzYbXRpZEyIrOyT4ZDwi6tHuUyw2o784Vyo3civugR4aYL9VSA%2BqrwdaZIt6HVG31EEWDZCYK20jGIX1tavh8l3fP2pgHTGDXWgY2BX7SIiU%3D\"}]}\r\ncf-ray: 9e3249192bb05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"cacf80d40e25fbaf40f8a07a1d6b8491","sha1":"0b54bffae68c2386b49c81fd36987fbb57bb1dbc","sha256":"dc2ea65bc3323b126a8af09bf0a45aef8dea17e625ba6ff173513bb0e63b7413","sha512":"78c914788b8419a87284e700fe567d71c3aa4ac682d1c24b7142f4b8b3bc63842e63e18e185ccebbdeb52ef0ce9854a11bf6e7c52330d8a0a0d86b2bf2bae1ff","ssdeep":"1536:iNVW+/Va8TWrgYgj8CfWIiW+XG80SziY2pVF18Zxi/49H6nozcj:iN4PWj8ywWKd9iYoan1zw","tlshash":"3f83e1959107cee2cd4617bde93b2fc2b3768135c2441ed79bb8d5b0ad1a4a4748b0ec","first_seen":"2024-11-22T16:17:37.055375Z","last_seen":"2026-03-27T23:48:45.9021Z","times_seen":16,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"perfect-exchanger.com/wp-content/uploads/pngegg.png","fqdn":"perfect-exchanger.com","domain":"perfect-exchanger.com","tld":"com"},"ip":{"addr":"104.21.49.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"perfect-exchanger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 04:03:53 GMT","end":"Mon, 15 Jun 2026 05:01:38 GMT"},"fingerprint":{"sha1":"CE:1B:60:FE:2B:B6:EA:BC:39:96:37:2A:0B:9B:7C:9F:21:C6:F4:91","sha256":"3A:0F:CE:8E:61:71:C2:E4:C3:BF:35:9F:EB:36:CB:AE:23:C0:89:83:56:CB:1E:AF:AD:73:0D:33:E9:7B:81:42"}}},"request":{"raw":"GET /wp-content/uploads/pngegg.png HTTP/1.1\r\nHost: perfect-exchanger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:48:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 181881\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Jul 2025 14:33:53 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=786BOt26m78mkxjOkV1jbHWYJrMujm45T6Tw7%2Bt89ySfnK27AgS2fuV2S%2FMvHl7%2B12z%2FGd2gppanJ7Esf5WQDHodInDeRBLGfWaNFyuNxo%2BmVvhN9Q3ke5%2BZ0Inoqn3MHWXGPmVdoB0%3D\"}]}\r\ncf-ray: 9e3249192bb25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 796 x 716, 8-bit/color RGBA, non-interlaced","md5":"5ab42c18485d97ac32d328466d43a3f2","sha1":"d8b09d67d57edd32462beee3611ea8876229854c","sha256":"d7be2c56cb8c5642da5c3573cfd61e8da4a7e063fe8b53fbb00cddcc69a9a2db","sha512":"0c5dc4bfa5cb02f5cda0d37d6cd4f668094a7627208d199c61a43698b7b338509700562f263709b416677ff61646b282b77aa6f94c63600eb74fc0942ae95267","ssdeep":"3072:KS4HZw/yumXUKfKcXI5qKh1HUubJujDQrln2ULCunUNStSdo7skb:w5wKKKiII5rJujD4lnRnTvpb","tlshash":"0304128ff205df5ab131a7a944a4792a32c68f60ba3710bb5d2701e15bcde54f902e37","first_seen":"2023-10-23T17:08:22Z","last_seen":"2026-03-27T23:48:45.90306Z","times_seen":5,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"perfect-exchanger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exchanger-infinity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 18:12:06 GMT\r\nexpires: Sat, 27 Mar 2027 18:12:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 20176\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-26T10:02:51.531846Z","times_seen":222882,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":130,"dns":1,"connect":28,"send":0,"wait":25,"receive":2,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exchanger-infinity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 18:12:06 GMT\r\nexpires: Sat, 27 Mar 2027 18:12:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 20176\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-26T10:02:51.531846Z","times_seen":222882,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":66,"dns":0,"connect":16,"send":0,"wait":17,"receive":20,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchanger-infinity.com/wp-content/uploads/logo.png","fqdn":"exchanger-infinity.com","domain":"exchanger-infinity.com","tld":"com"},"ip":{"addr":"172.67.169.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:20.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchanger-infinity.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Mar 2026 13:15:20 GMT","end":"Mon, 15 Jun 2026 14:11:32 GMT"},"fingerprint":{"sha1":"7F:0B:25:F5:60:ED:AA:3B:A5:2A:02:6C:1D:D5:EB:3C:9C:23:9D:41","sha256":"69:56:84:E7:DF:CC:D1:43:AC:64:61:F1:3E:01:8C:A3:CD:38:FC:CF:5C:E2:54:DB:41:94:6D:B3:B7:CC:AC:66"}}},"request":{"raw":"GET /wp-content/uploads/logo.png HTTP/1.1\r\nHost: exchanger-infinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exchanger-infinity.com/\r\nCookie: PHPSESSID=8c83acce99216548224849349ff1f097\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:48:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 536664\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 07 Nov 2025 15:01:13 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ZeJK9Aey0e2OMGontHpBiClhF1opWq1zDbhtjEeobgAnxp2zBex4UX0LxEZz3aEHO15rt5aocmz2THl1IBWzocmvQQ0cLmllzkIXEhkI042B%2FPlIv1yqhzpUeOuok0jd0CDDE5IYGfD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32490e4907b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1652 x 428, 8-bit/color RGBA, non-interlaced","md5":"f382e8cebb74ab6de8a2ab30399a21a0","sha1":"c8d3cb2dacf41817c6b05ea405516b55ed08a45e","sha256":"d213ba6dc45f4ed8415543e3c2c07f59349a0b22c9e911f756a6aba86caded0c","sha512":"ace77cf243a458733cf0a1d419b95c86d653303472e8c569482c6429cf4e975bd43e1ef56ce9fafde56219278d924a7021213e4161645179410e8d555e083623","ssdeep":"12288:/1VMWdi7FE58or8FeVH5SmO5fUuJqca4ZBM3rrg8v/APtMfdj:7MWdM+GUHB+cuJqca4AP3AP2j","tlshash":"2ab423e4f4b2b00f79887958992927dee7cb251e944281e84581fb47c06fefd0e9b246","first_seen":"2026-03-27T20:45:13.669308Z","last_seen":"2026-03-27T23:48:45.904113Z","times_seen":2,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":933,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://exchanger-infinity.com/","date":"2026-03-27T23:48:22.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://exchanger-infinity.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 481333\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-04-26T10:13:24.267434Z","times_seen":8605,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":84,"dns":1,"connect":32,"send":0,"wait":37,"receive":2,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}