{"report_id":"36d73f8f-f5f0-4990-b1e7-56dea4675f9c","version":6,"status":"done","tags":[],"date":"2025-10-28T11:54:11Z","url":{"schema":"http","addr":"exchangepair.com","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"84.32.84.33","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"http","addr":"exchangepair.com/","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"title":"Your domain is expired","dom":{"size":11256,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11256), with no line terminators","md5":"873cb18731eb55ac8c284e4779acbdc9","sha1":"653a1347be4b0677c601a86b4b73e162d1bdd6d1","sha256":"40a206300d7eddeff00ff6654392052537d4b5919d1b3913ca887a03faaad08e","sha512":"61cd6c4cdbcfe71eaa90a66ccbc2d1c8ed018d82537cfdbb14b94fe36d380f7596c3847046cb8b6ff6f136b1575e8c705894ca07a26faf1558f26b1c75495d2a","ssdeep":"192:tbn9uKk2E3OeoxKSL6+fS2mMlGU/vm5ldmezmPgro0Xro0QivzH7dowiTGPQIagN:tTw2E3VyoNlHmxivzH5owIGPQhgWCjT","tlshash":"2232d6735600302b60678dc979e7bb0c631ed05ba10758baed9d5a88c1cca634e7afcd","dom_hash":"domhasha751deb58b5af16d9b15d17e67218ebc","first_seen":"2025-10-28T11:54:13.875176Z","last_seen":"2025-10-28T11:54:13.875176Z","times_seen":1,"resource_available":false,"data":"PGh0bWw+PGhlYWQ+PHRpdGxlPllvdXIgZG9tYWluIGlzIGV4cGlyZWQ8L3RpdGxlPjxtZXRhIGNoYXJzZXQ9InV0Zi04Ij48bWV0YSBjb250ZW50PSJJRT1lZGdlLGNocm9tZT0xIiBodHRwLWVxdWl2PSJYLVVBLUNvbXBhdGlibGUiPjxtZXRhIGNvbnRlbnQ9IkRvbWFpbiBpcyBleHBpcmVkIiBuYW1lPSJkZXNjcmlwdGlvbiI+PG1ldGEgY29udG50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsaW5pdGlhbC1zY2FsZT0xIiBuYW1lPSJ2aWV3cG9ydCI+PGxpbmsgaHJlZj0iaHR0cHM6Ly9tYXhjZG4uYm9vdHN0cmFwY2RuLmNvbS9ib290c3RyYXAvMy4zLjcvY3NzL2Jvb3RzdHJhcC5taW4uY3NzIiByZWw9InN0eWxlc2hlZXQiPjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBhc3luYz0iIiBzcmM9Imh0dHBzOi8vd3d3Lmdvb2dsZS1hbmFseXRpY3MuY29tL2FuYWx5dGljcy5qcyI+PC9zY3JpcHQ+PHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiIGFzeW5jPSIiIHNyYz0iaHR0cHM6Ly93d3cuZ29vZ2xldGFnbWFuYWdlci5jb20vZ3RhZy9qcz9pZD1HLVM0SE1KNUVYWVkmYW1wO2N4PWMmYW1wO2d0bT00ZTVhbzEiPjwvc2NyaXB0PjxzY3JpcHQgc3JjPSJodHRwczovL2FqYXguZ29vZ2xlYXBpcy5jb20vYWpheC9saWJzL2pxdWVyeS8zLjIuMS9qcXVlcnkubWluLmpzIj48L3NjcmlwdD48c2NyaXB0IHNyYz0iaHR0cHM6Ly9tYXhjZG4uYm9vdHN0cmFwY2RuLmNvbS9ib290c3RyYXAvMy4zLjcvanMvYm9vdHN0cmFwLm1pbi5qcyI+PC9zY3JpcHQ+PGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJodHRwczovL2ZvbnRzLmdvb2dsZWFwaXMuY29tL2NzczI/ZmFtaWx5PU1hdGVyaWFsK1N5bWJvbHMrT3V0bGluZWQ6b3Bzeix3Z2h0LEZJTEwsR1JBREAyMC4uNDgsMTAwLi43MDAsMC4uMSwtNTAuLjIwMCI+PGxpbmsgaHJlZj0iaHR0cHM6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3M/ZmFtaWx5PU9wZW4rU2FuczozMDAsMzAwaSw0MDAsNDAwaSw2MDAsNjAwaSw3MDAsNzAwaSw4MDAsODAwaSZhbXA7c3Vic2V0PWN5cmlsbGljLGN5cmlsbGljLWV4dCxncmVlayxncmVlay1leHQsbGF0aW4tZXh0LHZpZXRuYW1lc2UiIHJlbD0ic3R5bGVzaGVldCI+PHN0eWxlPmh0bWx7IGhlaWdodDogMTAwJX0gYm9keXsgZm9udC1mYW1pbHk6ICJPcGVuIFNhbnMiLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOiAjMDAwOyBwYWRkaW5nOiAwOyBtYXJnaW46IDA7IGxpbmUtaGVpZ2h0OiAxLjQyODsgYmFja2dyb3VuZDogbGluZWFyLWdyYWRpZW50KDExZGVnLCAjRTlFREZCIC01MC4yMSUsICNGNkY4RkQgMzEuMTElKTt9IGgxLCBoMiwgaDMsIGg0LCBoNSwgaDYsIHB7IHBhZGRpbmc6IDA7IG1hcmdpbjogMDsgY29sb3I6ICMzMzN9IGgxeyBmb250LXNpemU6IDMwcHg7IGZvbnQtd2VpZ2h0OiA2MDAgIWltcG9ydGFudDsgY29sb3I6ICMzMzN9IGgyeyBmb250LXNpemU6IDI0cHg7IGZvbnQtd2VpZ2h0OiA2MDB9IGgzeyBmb250LXNpemU6IDIycHg7IGZvbnQtd2VpZ2h0OiA2MDA7IGxpbmUtaGVpZ2h0OiAyOHB4fSBocnsgbWFyZ2luLXRvcDogMzVweDsgbWFyZ2luLWJvdHRvbTogMzVweDsgYm9yZGVyOiAwOyBib3JkZXItdG9wOiAxcHggc29saWQgI2JmYmViZX0gdWx7IGxpc3Qtc3R5bGUtdHlwZTogbm9uZTsgbWFyZ2luOiAwOyBwYWRkaW5nOiAwfSBsaXsgZmxvYXQ6IHJpZ2h0OyBtYXJnaW4tbGVmdDogNDBweDsgbGluZS1oZWlnaHQ6IDI0cHg7IGZvbnQtc2l6ZTogMTRweDsgZm9udC13ZWlnaHQ6IDQwMH0gbGk6bGFzdC1jaGlsZHsgbWFyZ2luLWxlZnQ6IDU2cHh9IGF7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgY3Vyc29yOiBwb2ludGVyOyAtd2Via2l0LXRyYW5zaXRpb246IGFsbCAuM3MgZWFzZS1pbi1vdXQ7IC1tb3otdHJhbnNpdGlvbjogYWxsIC4zcyBlYXNlLWluLW91dDsgLW1zLXRyYW5zaXRpb246IGFsbCAuM3MgZWFzZS1pbi1vdXQ7IC1vLXRyYW5zaXRpb246IGFsbCAuM3MgZWFzZS1pbi1vdXQ7IHRyYW5zaXRpb246IGFsbCAuM3MgZWFzZS1pbi1vdXR9IGxpIGF7IGNvbG9yOiAjZmZmO30gbGk+aXsgY29sb3I6ICNmZmZ9IC5jb2x1bW4td3JhcHsgZGlzcGxheTogZmxleDsgd2lkdGg6IDEwMCU7IG1hcmdpbi1ib3R0b206IDIwcHg7fSAuY29sdW1uLXdyYXAgYXsgY29sb3I6ICM2NzNkZTY7IGZvbnQtd2VpZ2h0OiA3MDA7IGZvbnQtc2l6ZTogMTRweDsgbGluZS1oZWlnaHQ6IDI0cHg7IG1hcmdpbi10b3A6IDI0cHg7fSAuY29sdW1uLXdyYXAgcHsgY29sb3I6ICM3Mjc1ODY7IGZvbnQtc2l6ZTogMTRweDsgbGluZS1oZWlnaHQ6IDI0cHg7IGZvbnQtd2VpZ2h0OiA0MDA7fSAuY29udGFpbmVyeyBtYXJnaW4tdG9wOiAxMDBweH0gLm5hdmJhcnsgcG9zaXRpb246IHJlbGF0aXZlOyBtaW4taGVpZ2h0OiA0NXB4OyBtYXJnaW4tYm90dG9tOiAyMHB4OyBib3JkZXI6IDFweCBzb2xpZCB0cmFuc3BhcmVudH0gLm5hdmJhci1icmFuZHsgZmxvYXQ6IGxlZnQ7IGhlaWdodDogYXV0bzsgbWFyZ2luLXRvcDogNXB4OyBwYWRkaW5nOiAxMHB4IDEwcHg7IGZvbnQtc2l6ZTogMThweDsgbGluZS1oZWlnaHQ6IDIwcHh9IC5uYXZiYXItbmF2PmxpPmF7IHBhZGRpbmctdG9wOiAxOHB4OyBwYWRkaW5nLWJvdHRvbTogMThweDsgZm9udC1zaXplOiAxNHB4OyBwYWRkaW5nLWxlZnQ6IDVweDsgcGFkZGluZy1yaWdodDogNXB4fSAubmF2YmFyLW5hdj5saT5hOmhvdmVyeyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGNvbG9yOiAjY2RjM2VhICFpbXBvcnRhbnR9IC5uYXZiYXItbmF2PmxpPmEgaXsgbWFyZ2luLXJpZ2h0OiA4cHh9IC5uYXYtYmFyIGltZ3sgcG9zaXRpb246IHJlbGF0aXZlOyB0b3A6IDNweH0gLmNvbmdyYXR6eyBtYXJnaW46IDAgYXV0bzsgdGV4dC1hbGlnbjogY2VudGVyfSAudG9wLWNvbnRhaW5lcnsgZGlzcGxheTogZmxleDsgZmxleC1kaXJlY3Rpb246IHJvd30gLm1lc3NhZ2Utc3VidGl0bGV7IGNvbG9yOiAjMmYxYzZhOyBmb250LXdlaWdodDogNzAwOyBmb250LXNpemU6IDI0cHg7IGxpbmUtaGVpZ2h0OiAzMnB4OyBtYXJnaW4tYm90dG9tOiAxNnB4fSAubWVzc2FnZXsgd2lkdGg6IDYwJTsgaGVpZ2h0OiBhdXRvOyBwYWRkaW5nOiA0MHB4IDA7IGFsaWduLWl0ZW1zOiBiYXNlbGluZTsgYm9yZGVyLXJhZGl1czogNXB4OyBwb3NpdGlvbjogcmVsYXRpdmV9IC5tZXNzYWdlIHB7IGZvbnQtd2VpZ2h0OiA0MDA7IGZvbnQtc2l6ZTogMTRweDsgbGluZS1oZWlnaHQ6IDI0cHh9ICNwYXRoTmFtZXsgY29sb3I6ICMyZjFjNmE7IGZvbnQtd2VpZ2h0OiA3MDA7IG92ZXJmbG93LXdyYXA6IGJyZWFrLXdvcmQ7IGZvbnQtc2l6ZTogNDBweDsgbGluZS1oZWlnaHQ6IDQ4cHg7IG1hcmdpbi1ib3R0b206IDE2cHh9IC5zZWN0aW9uLXRpdGxleyBjb2xvcjogIzJmMWM2YTsgZm9udC13ZWlnaHQ6IDcwMDsgZm9udC1zaXplOiAyMHB4OyBsaW5lLWhlaWdodDogMzJweDsgbWFyZ2luLWJvdHRvbTogMTZweH0gLmNvbHVtbi1jdXN0b217IGJvcmRlci1yYWRpdXM6IDhweDsgYmFja2dyb3VuZC1jb2xvcjogI2ZmZjsgcGFkZGluZzogMjRweDsgYm9yZGVyOiAxcHggc29saWQgI2RhZGNlMDsgZGlzcGxheTogZmxleDsgaGVpZ2h0OiAxMDAlOyBmbGV4LWRpcmVjdGlvbjogY29sdW1uOyBqdXN0aWZ5LWNvbnRlbnQ6IHNwYWNlLWJldHdlZW47fSAuY29sdW1uLXRpdGxleyBjb2xvcjogIzJmMWM2YTsgZm9udC13ZWlnaHQ6IDcwMDsgZm9udC1zaXplOiAxNnB4OyBwYWRkaW5nLWJvdHRvbTogNXB4OyBsaW5lLWhlaWdodDogMjRweDt9IC5mb290ZXJ7IGZvbnQtc2l6ZTogMTNweDsgY29sb3I6IGdyYXkgIWltcG9ydGFudDsgbWFyZ2luLXRvcDogMjVweDsgbGluZS1oZWlnaHQ6IDEuNDsgbWFyZ2luLWJvdHRvbTogNDVweH0gLmZvb3RlciBheyBjdXJzb3I6IHBvaW50ZXI7IGNvbG9yOiAjNjQ2NDY0ICFpbXBvcnRhbnQ7IGZvbnQtc2l6ZTogMTJweH0gLmNvcHlyaWdodHsgY29sb3I6ICM2NDY0NjQgIWltcG9ydGFudDsgZm9udC1zaXplOiAxMnB4fSAubmF2YmFyIGF7IGNvbG9yOiAjZmZmICFpbXBvcnRhbnR9IC5uYXZiYXJ7IGJvcmRlci1yYWRpdXM6IDAgIWltcG9ydGFudH0gLm5hdmJhci1pbnZlcnNleyBiYWNrZ3JvdW5kLWNvbG9yOiAjMzYzNDRkOyBib3JkZXI6IG5vbmV9IC5jb2x1bW4tY3VzdG9tLXdyYXB7IHBhZGRpbmctdG9wOiAxMHB4IDIwcHg7IHdpZHRoOiAxMDAlOyBtYXgtd2lkdGg6IDM2NHB4O30gLmNvbHVtbi1jdXN0b20td3JhcDpmaXJzdC1jaGlsZHsgbWFyZ2luLXJpZ2h0OiAzMHB4O30gLmJhZGdleyBmb250LXNpemU6IDEycHg7IGxpbmUtaGVpZ2h0OiAxNnB4OyBtaW4taGVpZ2h0OiAyMHB4OyBtaW4td2lkdGg6IDIwcHg7IHZlcnRpY2FsLWFsaWduOiBtaWRkbGU7IHRleHQtYWxpZ246IGNlbnRlcjsgZGlzcGxheTogaW5saW5lLWJsb2NrOyBwYWRkaW5nOiA0cHggOHB4OyBmb250LXdlaWdodDogNzAwOyBib3JkZXItcmFkaXVzOiA0cHg7IGJhY2tncm91bmQtY29sb3I6ICNmYzUxODV9IC5tYXRlcmlhbC1zeW1ib2xzLW91dGxpbmVkeyBtYXJnaW4tcmlnaHQ6IDhweDsgZm9udC12YXJpYXRpb24tc2V0dGluZ3M6ICdGSUxMJyAxLCAnd2dodCcgNDAwLCAnR1JBRCcgMCwgJ29wc3onIDI0fWxpIGEubG9naW4tbGlua3sgZGlzcGxheTogZmxleDsgYWxpZ24taXRlbXM6IGNlbnRlcjsgcGFkZGluZy10b3A6IDE2cHg7IHBhZGRpbmctYm90dG9tOiAxNnB4fS5pbWctd3JhcHBlcnsgbWF4LXdpZHRoOiA0NDVweH0uaW1nLXdyYXBwZXIgaW1neyBtYXgtd2lkdGg6IDEwMCV9IEBtZWRpYSBzY3JlZW4gYW5kIChtYXgtd2lkdGg6NzY4cHgpeyAubWVzc2FnZXsgd2lkdGg6IDEwMCU7IHBhZGRpbmc6IDM1cHggMH0gLmNvbnRhaW5lcnsgbWFyZ2luLXRvcDogMzBweH0gLm5hdmJhci1saW5rc3sgZGlzcGxheTogZmxleDsgZmxleC1kaXJlY3Rpb246IGNvbHVtbjsgYWxpZ24taXRlbXM6IGNlbnRlcn0gLm5hdmJhci1saW5rcz5saXsgbWFyZ2luOiAwfSAudG9wLWNvbnRhaW5lcnsgZmxleC1kaXJlY3Rpb246IGNvbHVtbi1yZXZlcnNlfSAuY29sdW1uLXdyYXB7IGZsZXgtZGlyZWN0aW9uOiBjb2x1bW59IC5jb2x1bW4tY3VzdG9tLXdyYXB7IG1hcmdpbi1ib3R0b206IDEycHg7IG1heC13aWR0aDogbm9uZTt9fTwvc3R5bGU+PHNjcmlwdCBzcmM9Imh0dHBzOi8vd3d3Lmdvb2dsZXRhZ21hbmFnZXIuY29tL2d0YWcvanM/aWQ9VUEtMjY1NzU5ODktNDQiIGFzeW5jPSIiPjwvc2NyaXB0PjxzY3JpcHQ+ZnVuY3Rpb24gZ3RhZygpeyBkYXRhTGF5ZXIucHVzaChhcmd1bWVudHMpfSB3aW5kb3cuZGF0YUxheWVyPXdpbmRvdy5kYXRhTGF5ZXIgfHwgW10sIGd0YWcoImpzIiwgbmV3IERhdGUpLCBndGFnKCJjb25maWciLCAiVUEtMjY1NzU5ODktNDQiKTwvc2NyaXB0PjwvaGVhZD48Ym9keT48bmF2IGNsYXNzPSJuYXZiYXIgbmF2YmFyLWludmVyc2UiPjxkaXYgY2xhc3M9ImNvbnRhaW5lci1mbHVpZCIgc3R5bGU9InBhZGRpbmc6MCAzMnB4Ij48ZGl2IGNsYXNzPSJuYXZiYXItaGVhZGVyIj48YnV0dG9uIGNsYXNzPSJuYXZiYXItdG9nZ2xlIiBkYXRhLXRhcmdldD0iI215TmF2YmFyIiBkYXRhLXRvZ2dsZT0iY29sbGFwc2UiIHR5cGU9ImJ1dHRvbiI+PHNwYW4gY2xhc3M9Imljb24tYmFyIj48L3NwYW4+PHNwYW4gY2xhc3M9Imljb24tYmFyIj48L3NwYW4+PHNwYW4gY2xhc3M9Imljb24tYmFyIj48L3NwYW4+PC9idXR0b24+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaG9zdGluZ2VyLmNvbS8iIHJlbD0ibm9mb2xsb3ciIGNsYXNzPSJuYXZiYXItYnJhbmQiPjxpbWcgc3JjPSJob3N0aW5nZXItbG9nby5zdmciIGFsdD0iSG9zdGluZ2VyIiB3aWR0aD0iMTIwIj48L2E+PC9kaXY+PGRpdiBjbGFzcz0iY29sbGFwc2UgbmF2YmFyLWNvbGxhcHNlIiBpZD0ibXlOYXZiYXIiPjx1bCBjbGFzcz0ibmF2IG5hdmJhci1saW5rcyBuYXZiYXItbmF2IG5hdmJhci1yaWdodCI+PGxpPjxhIGhyZWY9Imh0dHBzOi8vd3d3Lmhvc3Rpbmdlci5jb20vd2ViLWhvc3RpbmciIHJlbD0ibm9mb2xsb3ciPkhvc3Rpbmc8L2E+PC9saT48bGk+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaG9zdGluZ2VyLmNvbS9kb21haW4tbmFtZS1zZWFyY2giIHJlbD0ibm9mb2xsb3ciPkRvbWFpbnM8L2E+PC9saT48bGk+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaG9zdGluZ2VyLmNvbS9idXNpbmVzcy1lbWFpbCIgcmVsPSJub2ZvbGxvdyI+RW1haWw8L2E+PC9saT48bGk+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaG9zdGluZ2VyLmNvbS92cHMtaG9zdGluZyIgcmVsPSJub2ZvbGxvdyI+VlBTPC9hPjwvbGk+PGxpPjxhIGhyZWY9Imh0dHBzOi8vaHBhbmVsLmhvc3Rpbmdlci5jb20vIiByZWw9Im5vZm9sbG93IiBjbGFzcz0ibG9naW4tbGluayI+PHNwYW4gY2xhc3M9Im1hdGVyaWFsLXN5bWJvbHMtb3V0bGluZWQiPmxvY2sgPC9zcGFuPkxvZ2luIDwvYT48L2xpPjwvdWw+PC9kaXY+PC9kaXY+PC9uYXY+PGRpdiBjbGFzcz0iZW1wdHktYWNjb3VudC1wYWdlIj48ZGl2IGNsYXNzPSJjb250YWluZXIiPjxkaXYgY2xhc3M9ImNvbC14cy0xMiB0b3AtY29udGFpbmVyIj48ZGl2IGNsYXNzPSJtZXNzYWdlIj48aDIgaWQ9InBhdGhOYW1lIj5leGNoYW5nZXBhaXIuY29tPC9oMj48ZGl2IGNsYXNzPSJtZXNzYWdlLXN1YnRpdGxlIj5Zb3VyIGRvbWFpbiBpcyBleHBpcmVkLiBSZW5ldyB0aGUgZG9tYWluIHRvIGFjdGl2YXRlIHRoZSB3ZWJzaXRlPC9kaXY+PHA+V2Vic2l0ZSBjb250ZW50IGlzIHVuYXZhaWxhYmxlIGR1ZSB0byB0aGUgZmFjdCB0aGF0IGRvbWFpbiBoYXMgZXhwaXJlZC4gUmVuZXcgeW91ciBkb21haW4gaW4gb3JkZXIgdG8gc2VlIHlvdXIgd2Vic2l0ZSBvbmxpbmUuIDwvcD48L2Rpdj48ZGl2IGNsYXNzPSJpbWctd3JhcHBlciI+PGltZyBzcmM9Im1hbi1iZWhpbmQtZGVzay5wbmciIGNsYXNzPSJpbWctZmx1aWQiIGhlaWdodD0iYXV0byI+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0iY29sLXhzLTEyIj48ZGl2IGNsYXNzPSJzZWN0aW9uLXRpdGxlIj5XaGF0J3MgbmV4dD88L2Rpdj48L2Rpdj48ZGl2IGNsYXNzPSJjb2x1bW4td3JhcCI+PGRpdiBjbGFzcz0iY29sdW1uLWN1c3RvbS13cmFwIj48ZGl2IGNsYXNzPSJjb2x1bW4tY3VzdG9tIj48ZGl2PjxkaXYgY2xhc3M9ImNvbHVtbi10aXRsZSI+U2F2ZSB5b3VyIGRvbWFpbjwvZGl2PjxwPkRvbid0IGxvc2UgeW91ciBkb21haW4uIExvZyBpbiB0byB5b3VyIEhvc3RpbmdlciBhY2NvdW50IGluIG9yZGVyIHRvIHJlbmV3IHlvdXIgZG9tYWluIDwvcD48L2Rpdj48YSBocmVmPSJodHRwczovL2hwYW5lbC5ob3N0aW5nZXIuY29tL2RvbWFpbnMiIHJlbD0ibm9mb2xsb3ciPlJlbmV3IG5vdzwvYT48L2Rpdj48L2Rpdj48ZGl2IGNsYXNzPSJjb2x1bW4tY3VzdG9tLXdyYXAiPjxkaXYgY2xhc3M9ImNvbHVtbi1jdXN0b20iPjxkaXY+PGRpdiBjbGFzcz0iY29sdW1uLXRpdGxlIj5HZXQgYSBuZXcgZG9tYWluIHN0YXJ0aW5nIGZyb20gJDAuOTk8L2Rpdj48cD5Vc2Ugb3VyIGRvbWFpbiBjaGVja2VyIHRvb2wgdG8gZmluZCB0aGUgcGVyZmVjdCBuYW1lIGZvciB5b3VyIG9ubGluZSBwcm9qZWN0LjwvcD48L2Rpdj48YSBocmVmPSJodHRwczovL3d3dy5ob3N0aW5nZXIuY29tL2RvbWFpbi1uYW1lLXNlYXJjaCIgcmVsPSJub2ZvbGxvdyI+R2V0IG5ldyBkb21haW48L2E+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PHNjcmlwdD52YXIgcHVueWNvZGU9bmV3IGZ1bmN0aW9uICgpeyB0aGlzLnV0ZjE2PXsgZGVjb2RlOiBmdW5jdGlvbiAobyl7IGZvciAodmFyIHIsIGUsIG49W10sIHQ9MCwgYT1vLmxlbmd0aDsgdCA8IGE7KXsgaWYgKDU1Mjk2PT0oNjM0ODggJiAocj1vLmNoYXJDb2RlQXQodCsrKSkpKXsgaWYgKGU9by5jaGFyQ29kZUF0KHQrKyksIDU1Mjk2ICE9KDY0NTEyICYgcikgfHwgNTYzMjAgIT0oNjQ1MTIgJiBlKSkgdGhyb3cgbmV3IFJhbmdlRXJyb3IoIlVURi0xNihkZWNvZGUpOiBJbGxlZ2FsIFVURi0xNiBzZXF1ZW5jZSIpOyByPSgoMTAyMyAmIHIpIDw8IDEwKSArICgxMDIzICYgZSkgKyA2NTUzNn0gbi5wdXNoKHIpfSByZXR1cm4gbn0sIGVuY29kZTogZnVuY3Rpb24gKG8peyBmb3IgKHZhciByLCBlPVtdLCBuPTAsIHQ9by5sZW5ndGg7IG4gPCB0Oyl7IGlmICg1NTI5Nj09KDYzNDg4ICYgKHI9b1tuKytdKSkpIHRocm93IG5ldyBSYW5nZUVycm9yKCJVVEYtMTYoZW5jb2RlKTogSWxsZWdhbCBVVEYtMTYgdmFsdWUiKTsgNjU1MzUgPCByICYmIChyIC09NjU1MzYsIGUucHVzaChTdHJpbmcuZnJvbUNoYXJDb2RlKHIgPjEwICYgMTAyMyB8IDU1Mjk2KSksIHI9NTYzMjAgfCAxMDIzICYgciksIGUucHVzaChTdHJpbmcuZnJvbUNoYXJDb2RlKHIpKX0gcmV0dXJuIGUuam9pbigiIil9fTsgdmFyIG89MzYsIHI9MjE0NzQ4MzY0NzsgZnVuY3Rpb24gZShvLCByKXsgcmV0dXJuIG8gKyAyMiArIDc1ICogKG8gPCAyNikgLSAoKDAgIT1yKSA8PCA1KX0gZnVuY3Rpb24gbihyLCBlLCBuKXsgdmFyIHQ7IGZvciAocj1uID8gTWF0aC5mbG9vcihyIC8gNzAwKSA6IHIgPjEsIHIgKz1NYXRoLmZsb29yKHIgLyBlKSwgdD0wOyA0NTUgPCByOyB0ICs9bylyPU1hdGguZmxvb3IociAvIDM1KTsgcmV0dXJuIE1hdGguZmxvb3IodCArIDM2ICogciAvIChyICsgMzgpKX0gdGhpcy5kZWNvZGU9ZnVuY3Rpb24gKGUsIHQpeyB2YXIgYSwgaCwgZiwgaSwgYywgdSwgZCwgbCwgcCwgZywgcywgQywgdywgdiwgbT1bXSwgeT1bXSwgRT1lLmxlbmd0aDsgZm9yIChhPTEyOCwgZj0wLCBpPTcyLCAoYz1lLmxhc3RJbmRleE9mKCItIikpIDwgMCAmJiAoYz0wKSwgdT0wOyB1IDwgYzsgKyt1KXsgaWYgKHQgJiYgKHlbbS5sZW5ndGhdPWUuY2hhckNvZGVBdCh1KSAtIDY1IDwgMjYpLCAxMjggPD1lLmNoYXJDb2RlQXQodSkpIHRocm93IG5ldyBSYW5nZUVycm9yKCJJbGxlZ2FsIGlucHV0ID49MHg4MCIpOyBtLnB1c2goZS5jaGFyQ29kZUF0KHUpKX0gZm9yIChkPTAgPCBjID8gYyArIDEgOiAwOyBkIDwgRTspeyBmb3IgKGw9ZiwgcD0xLCBnPW87IDsgZyArPW8peyBpZiAoRSA8PWQpIHRocm93IFJhbmdlRXJyb3IoInB1bnljb2RlX2JhZF9pbnB1dCgxKSIpOyBpZiAodj1lLmNoYXJDb2RlQXQoZCsrKSwgbyA8PShzPXYgLSA0OCA8IDEwID8gdiAtIDIyIDogdiAtIDY1IDwgMjYgPyB2IC0gNjUgOiB2IC0gOTcgPCAyNiA/IHYgLSA5NyA6IG8pKSB0aHJvdyBSYW5nZUVycm9yKCJwdW55Y29kZV9iYWRfaW5wdXQoMikiKTsgaWYgKHMgPk1hdGguZmxvb3IoKHIgLSBmKSAvIHApKSB0aHJvdyBSYW5nZUVycm9yKCJwdW55Y29kZV9vdmVyZmxvdygxKSIpOyBpZiAoZiArPXMgKiBwLCBzIDwgKEM9ZyA8PWkgPyAxIDogaSArIDI2IDw9ZyA/IDI2IDogZyAtIGkpKSBicmVhazsgaWYgKHAgPk1hdGguZmxvb3IociAvIChvIC0gQykpKSB0aHJvdyBSYW5nZUVycm9yKCJwdW55Y29kZV9vdmVyZmxvdygyKSIpOyBwICo9byAtIEN9IGlmIChpPW4oZiAtIGwsIGg9bS5sZW5ndGggKyAxLCAwPT09bCksIE1hdGguZmxvb3IoZiAvIGgpID5yIC0gYSkgdGhyb3cgUmFuZ2VFcnJvcigicHVueWNvZGVfb3ZlcmZsb3coMykiKTsgYSArPU1hdGguZmxvb3IoZiAvIGgpLCBmICU9aCwgdCAmJiB5LnNwbGljZShmLCAwLCBlLmNoYXJDb2RlQXQoZCAtIDEpIC0gNjUgPCAyNiksIG0uc3BsaWNlKGYsIDAsIGEpLCBmKyt9IGlmICh0KSBmb3IgKGY9MCwgdz1tLmxlbmd0aDsgZiA8IHc7IGYrKyl5W2ZdICYmIChtW2ZdPVN0cmluZy5mcm9tQ2hhckNvZGUobVtmXSkudG9VcHBlckNhc2UoKS5jaGFyQ29kZUF0KDApKTsgcmV0dXJuIHRoaXMudXRmMTYuZW5jb2RlKG0pfSwgdGhpcy5lbmNvZGU9ZnVuY3Rpb24gKHQsIGEpeyB2YXIgaCwgZiwgaSwgYywgdSwgZCwgbCwgcCwgZywgcywgQywgdzsgYSAmJiAodz10aGlzLnV0ZjE2LmRlY29kZSh0KSk7IHZhciB2PSh0PXRoaXMudXRmMTYuZGVjb2RlKHQudG9Mb3dlckNhc2UoKSkpLmxlbmd0aDsgaWYgKGEpIGZvciAoZD0wOyBkIDwgdjsgZCsrKXdbZF09dFtkXSAhPXdbZF07IHZhciBtLCB5PVtdOyBmb3IgKGg9MTI4LCB1PTcyLCBkPWY9MDsgZCA8IHY7ICsrZCl0W2RdIDwgMTI4ICYmIHkucHVzaChTdHJpbmcuZnJvbUNoYXJDb2RlKHcgPyAobT10W2RdLCAobSAtPShtIC0gOTcgPCAyNikgPDwgNSkgKyAoKCF3W2RdICYmIG0gLSA2NSA8IDI2KSA8PCA1KSkgOiB0W2RdKSk7IGZvciAoaT1jPXkubGVuZ3RoLCAwIDwgYyAmJiB5LnB1c2goIi0iKTsgaSA8IHY7KXsgZm9yIChsPXIsIGQ9MDsgZCA8IHY7ICsrZCloIDw9KEM9dFtkXSkgJiYgQyA8IGwgJiYgKGw9Qyk7IGlmIChsIC0gaCA+TWF0aC5mbG9vcigociAtIGYpIC8gKGkgKyAxKSkpIHRocm93IFJhbmdlRXJyb3IoInB1bnljb2RlX292ZXJmbG93ICgxKSIpOyBmb3IgKGYgKz0obCAtIGgpICogKGkgKyAxKSwgaD1sLCBkPTA7IGQgPCB2OyArK2QpeyBpZiAoKEM9dFtkXSkgPCBoICYmICsrZiA+cikgcmV0dXJuIEVycm9yKCJwdW55Y29kZV9vdmVyZmxvdygyKSIpOyBpZiAoQz09aCl7IGZvciAocD1mLCBnPW87ICEocCA8IChzPWcgPD11ID8gMSA6IHUgKyAyNiA8PWcgPyAyNiA6IGcgLSB1KSk7IGcgKz1vKXkucHVzaChTdHJpbmcuZnJvbUNoYXJDb2RlKGUocyArIChwIC0gcykgJSAobyAtIHMpLCAwKSkpLCBwPU1hdGguZmxvb3IoKHAgLSBzKSAvIChvIC0gcykpOyB5LnB1c2goU3RyaW5nLmZyb21DaGFyQ29kZShlKHAsIGEgJiYgd1tkXSA/IDEgOiAwKSkpLCB1PW4oZiwgaSArIDEsIGk9PWMpLCBmPTAsICsraX19ICsrZiwgKytofSByZXR1cm4geS5qb2luKCIiKX0sIHRoaXMuVG9BU0NJST1mdW5jdGlvbiAobyl7IGZvciAodmFyIHI9by5zcGxpdCgiLiIpLCBlPVtdLCBuPTA7IG4gPCByLmxlbmd0aDsgKytuKXsgdmFyIHQ9cltuXTsgZS5wdXNoKHQubWF0Y2goL1teQS1aYS16MC05LV0vKSA/ICJ4bi0tIiArIHB1bnljb2RlLmVuY29kZSh0KSA6IHQpfSByZXR1cm4gZS5qb2luKCIuIil9LCB0aGlzLlRvVW5pY29kZT1mdW5jdGlvbiAobyl7IGZvciAodmFyIHI9by5zcGxpdCgiLiIpLCBlPVtdLCBuPTA7IG4gPCByLmxlbmd0aDsgKytuKXsgdmFyIHQ9cltuXTsgZS5wdXNoKHQubWF0Y2goL154bi0tLykgPyBwdW55Y29kZS5kZWNvZGUodC5zbGljZSg0KSkgOiB0KX0gcmV0dXJuIGUuam9pbigiLiIpfX0sIHBhdGhOYW1lPXdpbmRvdy5sb2NhdGlvbi5ob3N0bmFtZSwgYWNjb3VudD1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgicGF0aE5hbWUiKTsgYWNjb3VudC5pbm5lckhUTUw9cHVueWNvZGUuVG9Vbmljb2RlKHBhdGhOYW1lKTwvc2NyaXB0PjwvYm9keT48L2h0bWw+"}},"submit":{"url":{"schema":"http","addr":"exchangepair.com","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"84.32.84.33","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-02T11:54:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"exchangepair.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-10-26T22:18:41.054789Z","alert_count":0,"request_count":1,"received_data":87645,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-26T22:13:53.528089Z","alert_count":0,"request_count":1,"received_data":849,"sent_data":980,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-26T22:12:37.824968Z","alert_count":0,"request_count":2,"received_data":60084,"sent_data":1064,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-10-26T22:13:53.528301Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":939,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2025-10-26T22:32:37.519973Z","alert_count":0,"request_count":2,"received_data":160145,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-26T22:13:34.663946Z","alert_count":0,"request_count":2,"received_data":770964,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"exchangepair.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-28","domain_rank":0,"first_seen":"2025-08-14T02:50:43.620619Z","last_seen":"2025-08-14T02:50:43.620619Z","alert_count":5,"request_count":5,"received_data":143219,"sent_data":1972,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:3.3.7","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-26T22:12:38.002151Z","alert_count":0,"request_count":3,"received_data":3875139,"sent_data":1685,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-06T03:19:13.953216Z","times_seen":99044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-06T03:58:54.259313Z","times_seen":97409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"exchangepair.com/","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4945b5ff2cf7db5523a0c3db817e5a69","sha1":"10fdbdcb1c153429ba36982f7828d2bb47a54924","sha256":"cf2eae9c78d7609467d24231d8460dac1cf0749b8ff016de5073495c759496a6","sha512":"53de19dd5c86cab1a70d37bd8b93015e022627cfe27ee67d7b7dab90a0769d646e151c120af8b43cfe3d321840d79ea222657ef621d15475bb1737dfe439b1d9","ssdeep":"","tlshash":"e1c02bd83d0b4c6111fb33d00b1fbf087205331035c104710405f008123ce1f904cc40","size":139,"data":"","first_seen":"2024-01-23T07:30:21Z","last_seen":"2026-08-06T03:53:40.532057Z","times_seen":9385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"exchangepair.com/","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73678805e79fe0e784cd5ba5c00e94a4","sha1":"3e11b60579879be0300f32936df8c5fdfe24f3cd","sha256":"e4e88cceac22d6c3889c429667acd642011a36b76865815ad2b5b836272b09d0","sha512":"9da7f373f207ed19b1671da502327233180804200d2ba920b2adfd24bfef94c64260aa528289bf81236346dc70f301d8c2c1f4e90ba1c3d0eacacf777fe60e58","ssdeep":"","tlshash":"6d71c6665241262f349bea031cc74c0c576da45a715a2449df0cadb4a0a2b79cffedec","size":3554,"data":"","first_seen":"2024-01-23T07:30:21Z","last_seen":"2026-08-05T08:19:52.702253Z","times_seen":3745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-26575989-44","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c8f4f677b4b88c23d5d304e5919ef46","sha1":"816eddcc3a12cd8aeafdb6bee3b5afc147b39948","sha256":"f3a7e1467f0dd4210bcf413639bdbe55e38e154bc650f8d1295b6e2a5da4d93c","sha512":"71e21f7ef6cf4431c61d0d67b35c3d0780996b1553e80f9e46bf590810b011fc27aa8e2f873ab1c74c61b27ad5830f99d09f4fb31608b1af248b673951ca86a1","ssdeep":"6144:2RJDX484O9Z8nP5D6GN8xKlc/UEA1gxPSF0010X:+JD6O9Z8nP5umdgx2nQ","tlshash":"e86407cd73d674268393a478503f018ba17b69d2f84cc895f186d8d82e70aaa4277f7d","size":313956,"data":"","first_seen":"2025-10-28T11:01:30.148728Z","last_seen":"2025-10-28T11:54:13.881624Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"exchangepair.com/sandbox%20eval%20code","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-S4HMJ5EXYY\u0026cx=c\u0026gtm=4e5ao1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ad1908d9efaa4356c4ed2b186378f78","sha1":"39dc428d30d398c6b49836d986244516c255d595","sha256":"4910b7b4ab76d8e5c948204b98b40d6cf1dc3cf0490ab33779231b3d8ec569fb","sha512":"4cdd3be4fd599252e2d76a10c64c60261e54a91e21fbb49500deb08f1ebbb03a752f46f65614ae5d8673ada3896686a84c41fd1505d8f99befc28b8530dc45f5","ssdeep":"6144:meRJDX1b84L9Z8nP5D+GN8xkqa2zXKc/UEATgxR3+2H9z4dt:rJDldL9Z8nP5CmgalgxlO","tlshash":"c1a40a8e73c6746653d6f478503f01cba97b29a2b49cc8a6b1c9ccf02d3459a4267f78","size":455774,"data":"","first_seen":"2025-10-28T09:16:28.235216Z","last_seen":"2025-10-28T11:54:13.882872Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"exchangepair.com/","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-28T11:53:49.051Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: exchangepair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T04:01:16.359001Z","times_seen":17736640,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":92,"dns":0,"connect":24,"send":0,"wait":0,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"exchangepair.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Oct 2025 11:53:49 GMT\r\ndate: Tue, 28 Oct 2025 11:53:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0f79507778d3b33eebefed4b79a005a1","sha1":"91c075b5e7bc7b061efd6a4849a819bc7579475d","sha256":"d9db40aa48e5577e55bce7577369a7fad385a8ed0ffb6a01acf5d307fadcebe4","sha512":"7d5a934747d485df0f6b9fb59797d044ec5e76c1867b9b91fdbb5faaf2f37bdb32b334828e5aba5e590a6ef39a92989898f5584c256c35b3da5566279d2ed5a1","ssdeep":"","tlshash":"e4f04c587a5a5805a5550c97330f3f221e1d491f294ad8feaf510d0c9efe9774345b0f","first_seen":"2025-10-17T18:04:43.177073Z","last_seen":"2025-10-29T20:56:14.11058Z","times_seen":209,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":198,"dns":0,"connect":21,"send":0,"wait":18,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"exchangepair.com/hostinger-logo.svg","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"84.32.84.33","port":80,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.375Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /hostinger-logo.svg HTTP/1.1\r\nHost: exchangepair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 28 Oct 2025 11:53:49 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nServer: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 159de37aad20829b2d3d6473341da4dd-fra-edge3\r\nExpires: Tue, 28 Oct 2025 11:53:48 GMT\r\nCache-Control: no-cache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":7346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bbd75ee26d7fb78a20df164c40a58774","sha1":"7d2b2c3456334399484f2da298553f46396ecdbb","sha256":"5666d8ea07df15c9adb90d09fcfb7ed3c0251e724b027f168d31c606299d9340","sha512":"baca672feaf6c6c24f6f7f6e7e9f382ea376dc69174415bfe8756d1ce42f5e16e3aafd9df65c6443f9068bcf8d6be2f1578b308343a0c3846283583edc612cfa","ssdeep":"96:qLBwZoBBLMW3MeKJw/yfnDzni8TMLGUYNkPkX0jnV4tU5r5vmTRqYr:q9KutMW8fJnfnDjVHUYIqSV7lvmTRq+","tlshash":"6fe185ee376893e09506a7b8d92505f2776f38fab7955f84c3a09e94b841064dcc9cd0","first_seen":"2023-05-08T02:55:47Z","last_seen":"2026-08-05T08:19:52.700089Z","times_seen":4004,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":205,"dns":4,"connect":24,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"exchangepair.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"exchangepair.com/man-behind-desk.png","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"84.32.84.33","port":80,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.376Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /man-behind-desk.png HTTP/1.1\r\nHost: exchangepair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 28 Oct 2025 11:53:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 112693\r\nConnection: close\r\nVary: Accept-Encoding\r\nServer: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f7139f0433c0b0a8afd75836e9e150da-fra-edge2\r\nExpires: Tue, 28 Oct 2025 11:53:48 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":112693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 623 x 384, 8-bit/color RGBA, non-interlaced","md5":"e82555626d73858c899f07cb0230c64c","sha1":"629ea5924ad011266db91a8d33ab5f2cdb06bc44","sha256":"72a0dcfcc39d207dee9625a2cce950b434409a2e842903895fd415ce136f6c52","sha512":"66861643bc41d8014b61f8365ad1326e1c3ea6137712cb909c06cf710e939b31dc5ad46104fb9337d44e2c125d828dd02be29de56dec7388db0cc7f36512b577","ssdeep":"3072:M76JfFZ8MC+PY/jH/nVTTJH+qCsQMiYyl/oeWQB1rw:06JfFZi+Y/jPNQqCsQtjmPorw","tlshash":"35b312efb4036684db3fd14a43c8549121e9baad861b0b2b7fe0413860f2b32c66599d","first_seen":"2024-01-23T07:30:21Z","last_seen":"2026-08-05T08:19:52.697272Z","times_seen":2382,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":204,"dns":4,"connect":21,"send":0,"wait":21,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"exchangepair.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialsymbolsoutlined/v290/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/materialsymbolsoutlined/v290/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://exchangepair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3775992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 24 Oct 2025 17:48:33 GMT\r\nexpires: Sat, 24 Oct 2026 17:48:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 324316\r\nlast-modified: Fri, 17 Oct 2025 14:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3775992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 3775992, version 1.0","md5":"a77f57486522f44e05839602b7ffaa72","sha1":"552390917e2efdf3b20c536117400daf91c132ae","sha256":"4fb4765ad7b350a4fb60783c303def928a7579617c55d7a159913d29a06ad713","sha512":"374058a980f1fe6c1fb32abd782796df9b72196a418196ece2d073c2c05a312b0a255050b563dea6b6f94106f3f0fb2fbe2bde6c576c38301afe48932a2c9057","ssdeep":"24576:JdR0OrhrTzkIkrz/5/B/mQZ0kC8wrRWhrKLxlL7Z+:10OrR312/TmQqS2R4il4","tlshash":"272533364b232e2e6822f0b789626690fac478c65dbc7cdf671f8e515e8fa450857c07","first_seen":"2025-10-14T23:39:36.794329Z","last_seen":"2025-10-30T16:53:12.771569Z","times_seen":159,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":72,"dns":1,"connect":27,"send":0,"wait":35,"receive":271,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-S4HMJ5EXYY\u0026cid=202617527.1761652430\u0026gtm=45je5ao1v9135860898za200\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105322303~115480710~115616985~115938465~115938468~116217636~116217638\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105322303~115480710~115616985~115938465~115938468~116217636~116217638\u0026z=1515196492","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:50.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:37:03 GMT","end":"Wed, 24 Dec 2025 14:37:02 GMT"},"fingerprint":{"sha1":"01:07:2F:3E:9D:0C:AF:61:3D:59:70:51:C6:74:49:1C:D9:36:BA:88","sha256":"AB:06:67:D9:B5:54:EF:27:3A:97:65:78:F5:E0:A6:5C:49:07:D7:4D:4D:59:57:DD:A3:67:7C:96:84:79:19:4F"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-S4HMJ5EXYY\u0026cid=202617527.1761652430\u0026gtm=45je5ao1v9135860898za200\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105322303~115480710~115616985~115938465~115938468~116217636~116217638\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105322303~115480710~115616985~115938465~115938468~116217636~116217638\u0026z=1515196492 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 28 Oct 2025 11:53:50 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-06T04:00:58.092714Z","times_seen":1021824,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":204,"dns":3,"connect":14,"send":0,"wait":36,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 03:23:24 GMT","end":"Mon, 08 Dec 2025 04:23:14 GMT"},"fingerprint":{"sha1":"2D:94:96:D6:08:54:E8:A2:4A:A9:D7:90:E4:75:91:6B:AC:CB:AA:24","sha256":"24:50:0C:86:73:A4:E6:6C:AD:20:57:80:86:4E:19:B1:E9:76:7F:2A:BE:CC:E9:75:B2:07:67:62:FA:9B:E7:8D"}}},"request":{"raw":"GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Oct 2025 11:53:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 995a3c23aa11c759-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"ec3bb52a00e176a7181d454dffaea219\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 02/25/2025 23:55:13\r\ncdn-proxyver: 1.19\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3d6d3e43a53f02c8432187205f960146\r\ncdn-cache: HIT\r\nage: 216068\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121200,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-06T03:04:09.700856Z","times_seen":72446,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":17,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30306\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:39:18 GMT\r\nexpires: Fri, 23 Oct 2026 17:39:18 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 411271\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86659,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-06T03:19:13.953216Z","times_seen":99044,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":152,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"exchangepair.com/favicon.ico","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"84.32.84.33","port":80,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:50.105Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: exchangepair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 28 Oct 2025 11:53:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 3932\r\nConnection: close\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nServer: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7da83ee832fa212cb0b2a77f557d482a-fra-edge2\r\nExpires: Tue, 28 Oct 2025 11:53:49 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:3.3.7","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":10881,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (10881), with no line terminators","md5":"bc6e7a9f1c26caacde39642459e56f9f","sha1":"52c511ada4666a3bfea85b26619e0976260401d6","sha256":"0fea82f8fc3080d40ec9fd86a161f5011cd2f3efad982495866fa06d3299368a","sha512":"47177fc3760189333929a67a63a52799a052ff82588b854afc31e35f8b210d93c525b46289ad493d32dace67c648eab4a60c199b08fff5029f5b20857aeb840f","ssdeep":"192:M79Rg2W3ZoxKSL6+fS2mMlGU/vm5ld6WiA1grzrmiPzH7dowiTGPQIagWCZ9/l6:M7s2W3ZyoNlbJiPzH5owIGPQhgWCjc","tlshash":"9522d5276200302b70678d8a39e37f0d631ac05ba10754baed995e58c5cca235e7efcd","first_seen":"2024-11-12T11:42:16.368615Z","last_seen":"2026-08-05T08:19:52.696184Z","times_seen":3626,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":1,"connect":23,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"exchangepair.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-S4HMJ5EXYY\u0026gtm=45je5ao1v9135860898za200\u0026_p=1761652429607\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=202617527.1761652430\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAI\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105322303~115480710~115616985~115938465~115938468~116217636~116217638\u0026sid=1761652430\u0026sct=1\u0026seg=0\u0026dl=http%3A%2F%2Fexchangepair.com%2F\u0026dt=Your%20domain%20is%20expired\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1057","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:50.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-S4HMJ5EXYY\u0026gtm=45je5ao1v9135860898za200\u0026_p=1761652429607\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=202617527.1761652430\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAI\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105322303~115480710~115616985~115938465~115938468~116217636~116217638\u0026sid=1761652430\u0026sct=1\u0026seg=0\u0026dl=http%3A%2F%2Fexchangepair.com%2F\u0026dt=Your%20domain%20is%20expired\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1057 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://exchangepair.com/\r\nOrigin: http://exchangepair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: http://exchangepair.com\r\ndate: Tue, 28 Oct 2025 11:53:50 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:161:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:161:0\r\nreport-to: {\"group\":\"ascnsrsggc:161:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:161:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T04:01:16.359001Z","times_seen":17736640,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":62,"dns":2,"connect":21,"send":0,"wait":31,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-26575989-44","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtag/js?id=UA-26575989-44 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 28 Oct 2025 11:53:49 GMT\r\nexpires: Tue, 28 Oct 2025 11:53:49 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 28 Oct 2025 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 109674\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313956,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"6c8f4f677b4b88c23d5d304e5919ef46","sha1":"816eddcc3a12cd8aeafdb6bee3b5afc147b39948","sha256":"f3a7e1467f0dd4210bcf413639bdbe55e38e154bc650f8d1295b6e2a5da4d93c","sha512":"71e21f7ef6cf4431c61d0d67b35c3d0780996b1553e80f9e46bf590810b011fc27aa8e2f873ab1c74c61b27ad5830f99d09f4fb31608b1af248b673951ca86a1","ssdeep":"6144:2RJDX484O9Z8nP5D6GN8xKlc/UEA1gxPSF0010X:+JD6O9Z8nP5umdgx2nQ","tlshash":"e86407cd73d674268393a478503f018ba17b69d2f84cc895f186d8d82e70aaa4277f7d","first_seen":"2025-10-28T11:01:30.148728Z","last_seen":"2025-10-28T11:54:13.881624Z","times_seen":3,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":194,"dns":4,"connect":8,"send":0,"wait":24,"receive":21,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://exchangepair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Oct 2025 00:01:01 GMT\r\nexpires: Thu, 22 Oct 2026 00:01:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 561168\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-06T04:00:58.07874Z","times_seen":321876,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":78,"dns":1,"connect":18,"send":0,"wait":65,"receive":7,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-S4HMJ5EXYY\u0026cx=c\u0026gtm=4e5ao1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:04 GMT","end":"Wed, 24 Dec 2025 14:32:03 GMT"},"fingerprint":{"sha1":"D7:8C:7A:D0:97:B6:11:02:45:69:BD:62:90:53:49:F8:8D:01:20:26","sha256":"F3:B2:48:55:BA:37:4F:37:37:83:8F:61:8F:04:B7:1F:E7:6F:4D:1A:D6:71:F7:BA:2C:E5:C4:45:B8:D7:B7:7E"}}},"request":{"raw":"GET /gtag/js?id=G-S4HMJ5EXYY\u0026cx=c\u0026gtm=4e5ao1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 28 Oct 2025 11:53:49 GMT\r\nexpires: Tue, 28 Oct 2025 11:53:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149313\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455774,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8032)","md5":"8ad1908d9efaa4356c4ed2b186378f78","sha1":"39dc428d30d398c6b49836d986244516c255d595","sha256":"4910b7b4ab76d8e5c948204b98b40d6cf1dc3cf0490ab33779231b3d8ec569fb","sha512":"4cdd3be4fd599252e2d76a10c64c60261e54a91e21fbb49500deb08f1ebbb03a752f46f65614ae5d8673ada3896686a84c41fd1505d8f99befc28b8530dc45f5","ssdeep":"6144:meRJDX1b84L9Z8nP5D+GN8xkqa2zXKc/UEATgxR3+2H9z4dt:rJDldL9Z8nP5CmgalgxlO","tlshash":"c1a40a8e73c6746653d6f478503f01cba97b29a2b49cc8a6b1c9ccf02d3459a4267f78","first_seen":"2025-10-28T09:16:28.235216Z","last_seen":"2025-10-28T11:54:13.882872Z","times_seen":3,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"exchangepair.com/","fqdn":"exchangepair.com","domain":"exchangepair.com","tld":"com"},"ip":{"addr":"84.32.84.33","port":80,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-28T11:53:49.212Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: exchangepair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 28 Oct 2025 11:53:49 GMT\r\nContent-Type: text/html\r\nContent-Length: 3932\r\nConnection: close\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nServer: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6852dc96f60bcfbe807f2bd46577c956-fra-edge3\r\nExpires: Tue, 28 Oct 2025 11:53:48 GMT\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"BootstrapCDN:3.3.7","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":10881,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (10881), with no line terminators","md5":"bc6e7a9f1c26caacde39642459e56f9f","sha1":"52c511ada4666a3bfea85b26619e0976260401d6","sha256":"0fea82f8fc3080d40ec9fd86a161f5011cd2f3efad982495866fa06d3299368a","sha512":"47177fc3760189333929a67a63a52799a052ff82588b854afc31e35f8b210d93c525b46289ad493d32dace67c648eab4a60c199b08fff5029f5b20857aeb840f","ssdeep":"192:M79Rg2W3ZoxKSL6+fS2mMlGU/vm5ld6WiA1grzrmiPzH7dowiTGPQIagWCZ9/l6:M7s2W3ZyoNlbJiPzH5owIGPQhgWCjc","tlshash":"9522d5276200302b70678d8a39e37f0d631ac05ba10754baed995e58c5cca235e7efcd","first_seen":"2024-11-12T11:42:16.368615Z","last_seen":"2026-08-05T08:19:52.696184Z","times_seen":3626,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":23,"dns":0,"connect":25,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-28","alert":"Sinkholed","trigger":"exchangepair.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 03:23:24 GMT","end":"Mon, 08 Dec 2025 04:23:14 GMT"},"fingerprint":{"sha1":"2D:94:96:D6:08:54:E8:A2:4A:A9:D7:90:E4:75:91:6B:AC:CB:AA:24","sha256":"24:50:0C:86:73:A4:E6:6C:AD:20:57:80:86:4E:19:B1:E9:76:7F:2A:BE:CC:E9:75:B2:07:67:62:FA:9B:E7:8D"}}},"request":{"raw":"GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Oct 2025 11:53:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 995a3c23ba17c759-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"5869c96cc8f19086aee625d670d741f9\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:00 GMT\r\ncdn-cachedat: 05/12/2025 11:50:50\r\ncdn-proxyver: 1.27\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b1b9160e81bab8e089937fec86a3f9ec\r\ncdn-cache: HIT\r\nage: 450850\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-06T03:58:54.259313Z","times_seen":97409,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":27,"dns":3,"connect":1,"send":0,"wait":18,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i\u0026subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:04 GMT","end":"Wed, 24 Dec 2025 14:34:03 GMT"},"fingerprint":{"sha1":"5F:D5:F8:10:14:80:32:78:B6:66:AC:25:01:5E:C2:6B:0C:D6:03:BD","sha256":"66:2A:01:C5:DD:28:0B:66:17:E5:8A:2F:4E:52:AF:74:21:21:65:E1:71:72:47:4B:5D:69:50:8D:B4:16:49:C5"}}},"request":{"raw":"GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i\u0026subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://exchangepair.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Oct 2025 11:53:49 GMT\r\ndate: Tue, 28 Oct 2025 11:53:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58085,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"52d638a6553570c3ad986bba186f87a3","sha1":"da89c64b60fbc4f0d5442625759a6773ea59eb33","sha256":"36d64bccd2b2274c66aeb6e420a20c306ee9d350b7c873899fb5e31de0416765","sha512":"43c270c640ddf25de6bd9e9a0154e8c8d37b4c3cc2ebb810f853870910e5aa199c504b38478d0595f5fbf81904a4067863f7c8c0fea612932a24f8fb36f195bf","ssdeep":"384:+eO2pXt2tv/qY49Ynx8bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5e:YbPUiCAgkgHL8OOVosL3JbcI/z","tlshash":"84431c910417244066432dd233de3e30ee0fa2607084c076abfd9bdbeedad6a62b535d","first_seen":"2025-09-17T00:16:45.671638Z","last_seen":"2026-08-06T03:03:04.412786Z","times_seen":23008,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":193,"dns":12,"connect":8,"send":0,"wait":18,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://exchangepair.com/","date":"2025-10-28T11:53:49.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://exchangepair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Oct 2025 00:01:01 GMT\r\nexpires: Thu, 22 Oct 2026 00:01:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 561168\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-06T04:00:58.07874Z","times_seen":321876,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":69,"dns":0,"connect":15,"send":0,"wait":15,"receive":21,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}