{"report_id":"3720ff68-04f2-4b52-a358-5e89c1de82bd","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-01-20T02:20:31Z","url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"title":"Buy \u0026 Sell Bitcoin, Ethereum | Cryptocurrency Exchange | ALPINECHANGE","dom":{"size":152381,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1941)","md5":"acacc8c3aa9e8c8ffcd115538bab7cd7","sha1":"8ca23ee7127b3c7fa195469d08fe3f71462598c6","sha256":"5a6502975c2b64a06d488905e6e921e5a0b8a284c11b2cc6b0c3e26784f7cbd4","sha512":"257dafe0151bcb5f88a12c3050880b79d74028519ed9c961c532b6368c9d582401d55ac3029cf12574cd747b57a2ae1ca22012ecf8f6e461b1be7c251922fcdb","ssdeep":"3072:P4euSH8cBRRLdPn/cqArspZbfGO5MMDeoj:P4euSH8cBRRLdPn/cqArsOA","tlshash":"e1e3c72051f1146200a382d9aab2af5a3ea5e703d34ec6447afc1bc56fd7dc1dd8729e","dom_hash":"domhash33c4624eb6c0f4efcc16f9866ee9b58d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-24T02:20:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"api.binance.com","ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-01-18T08:11:07.692174Z","alert_count":0,"request_count":18,"received_data":87869,"sent_data":8664,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"alpinechange.com","ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-15","domain_rank":0,"first_seen":"2026-01-20T02:20:33.528532Z","last_seen":"2026-01-20T02:20:33.528533Z","alert_count":91,"request_count":90,"received_data":3957159,"sent_data":46629,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":1,"received_data":34196,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":3,"received_data":122889,"sent_data":1653,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":1,"received_data":203405,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-01-18T22:42:00.173248Z","alert_count":0,"request_count":1,"received_data":88168,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-18T22:25:16.015191Z","alert_count":0,"request_count":2,"received_data":654203,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-18T22:30:25.777558Z","alert_count":0,"request_count":1,"received_data":209625,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-05-31T13:19:35.991961Z","times_seen":2003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a3f4cf97298fa8f6d69269255b966e0","sha1":"4bf5ebe2a54b77861ed5f27ee6bf1b2dad51bee5","sha256":"ad2b3dcf918ab0ae263e9397f03ec368ae0bcb37a33ac868db9627a057e504df","sha512":"d4659950de2486f3b077024dfe504bdec342fd35e8017890344a783da99fdf2183f1135018e9229add4b5336bfc0cc5056e431c6bd7a86b3e76c89b34c28d425","ssdeep":"","tlshash":"e601dd4b375bb4a231b7b0455f9ba304b86b013b7aa0c411389c52089f60e2ba3266d4","size":675,"data":"","first_seen":"2025-06-23T06:40:42.611386Z","last_seen":"2026-03-01T06:06:49.610873Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/js/noti.js?v=3","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","size":12111,"data":"","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-05-25T10:16:26.578703Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","size":208522,"data":"","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-05-31T11:56:16.368645Z","times_seen":4725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-31T15:28:49.206204Z","times_seen":163124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d450bea2ae4b035e95c4bf621486c13","sha1":"3567c232074d9d2f96b7d4ce489a61c2d933a606","sha256":"d6fb2166159f96b4e113a78266e6b2591ff8a549d647ae58e0c743b5832db5fd","sha512":"8738ca7fc79b4ff1fb451c923c83c58eb9db9c399cb63e1c61c3b340a678d7069744c42f2ea78406b459a56e924e36c8df341ef1f7d45cf7969772015e8eb69f","ssdeep":"","tlshash":"c5e02b8b370f4c71549ba6872f7f7305f843213b99a1a421295d6204cf61e17a304cd0","size":295,"data":"","first_seen":"2025-06-19T20:02:29.562271Z","last_seen":"2026-05-26T21:59:31.216544Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/js/main.js?v=5","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8129e7a736eb7ab1bb4ee9f4d919fdc","sha1":"268925c35b15f7b723c0c4ff913610f7c22bbd12","sha256":"0fa2bfa1e742acff380af5b6ea26a4cddf165f7313c43d64cec77e2de97ab7a9","sha512":"5efb0f92dbb776182f79fa6ca42a0f22e44b753fc11a335a4de33b46b1a23c6d47bd682063b010144cd32e00a5e7bdbfba5db45a0049339b7a0db0388da2318e","ssdeep":"192:GVH2ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxg4S7/:GXKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"64928298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","size":21249,"data":"","first_seen":"2025-06-19T20:02:29.443643Z","last_seen":"2026-05-25T10:16:26.607875Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe8462dc5678e9f3091b64ec50361a58","sha1":"506e741fb2c2e2dc13ce89456af416e3b78c5823","sha256":"a2a2a71a1bfc6599fe99d8a524df0aca331deb4d217df2fd755aaa0fc2acde36","sha512":"2c039d3c82a63c59bb3cf427f0205599ccce4c78fcd376e982871a894ebc2073b25e959ac5768bcb392d80efd6f78a99dfed7755c5a2912aca889ad8b4b89048","ssdeep":"","tlshash":"4c01991b1c5360fe22ea203ee73b2a0a22152a872141c0533d9c80282fd08242fadbcd","size":714,"data":"","first_seen":"2025-06-22T10:42:51.78747Z","last_seen":"2026-05-26T21:59:31.217994Z","times_seen":373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72ee8adb330d5ca4c5d68c08d2c82d4d","sha1":"51852bc01b5edbbf37ea930915b13bf25816caa5","sha256":"794eba715fe6fe2f8036b6b751f3749fe868102e0d1d1ba0ae7bf85de90f2240","sha512":"3e09f830b768b8a9814f106064fa83947183b3e0c3b6786a5a1fa46a28bb2f284c8233f603c50080c9a3571a1e3644817dd60c8df42b78e9f811f0ab4cf95284","ssdeep":"","tlshash":"01f0264a23b54270a46fa91f819b11083b518047681af858370c42d06f5efaea2b37e6","size":494,"data":"","first_seen":"2024-12-06T22:27:57.13338Z","last_seen":"2026-05-15T00:39:55.753197Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/js/toastr.js","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-05-30T22:56:16.235006Z","times_seen":912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a73d1888783bc37159cd3ee2f1260c96","sha1":"fa19cbc64cf9aa640955409fa084779aed6f37d8","sha256":"f0d41aedd2275797bda35bac7f31e1929ca5f12b1dd8b7e638827ad2c40e9076","sha512":"b922d8c8fdf5409e0655d8467675b9392db7b4d877d12319deb1d860d4873f991e24e6533679a874618131c98537821104330fd74d5653f94ba35d8b1d240328","ssdeep":"","tlshash":"1731685dc1b1263501b3b17b13df595d293110a7b184c92d3eafdfc41fa50a0d4a2ed9","size":1716,"data":"","first_seen":"2025-06-23T06:41:51.795056Z","last_seen":"2026-04-06T12:02:02.584726Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6678892a7dc9cdbc182786bfcf09010","sha1":"9bced9c302e65a355752d7cbd521cf65417e0669","sha256":"b0832726babd55a083fa8310bae622a73eb4ecb4b1a290a7d568c6ae897229df","sha512":"74d84a477ae3e6a982d558645ec7cb1d17418db5308691bc6bc30f47ed0f6dc98bfcf08dfc5d4d81d70dcba58ee2669bafdc176b2b43990ccea00f4dbfd29abd","ssdeep":"6144:YMqdZ37uy3tpWct1OkxFzqPSmH4LpygQi:7QVuydNqPSmH4LpygQi","tlshash":"081429c9b7ca7062539365b8503f014bb17a7d92f84cd8d0e082d9d82e74aaa1277f7d","size":202756,"data":"","first_seen":"2026-01-19T08:31:57.052506Z","last_seen":"2026-01-20T07:10:40.067082Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/js/cryptocurrencies.min.js","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24cd9ad9b7bda9713ca2fc908733f1d0","sha1":"c882a0a0e3794423cd5985d90cc8542a17ffe038","sha256":"1e93a539f219669589c214b7eb9ef44a17d0b7d3db6b1daeaf8878694154537b","sha512":"040b75a122d4be4391cf614de748febb6a414579820a2e54307079b53edb246d926655068ca2e2b4e5c6674afaa52bf31fc0891df2afbfdbcfe1e7ea0aa805ea","ssdeep":"","tlshash":"a9d05e4d295820489f8d61efc07257889272046d39118596396a48111922c1971fbe98","size":232,"data":"","first_seen":"2024-02-04T05:15:41Z","last_seen":"2026-03-27T16:51:04.962154Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"42203a7d64a2312eb0ea3fe108b217dc","sha1":"0b1868f33aba2de53a901913312f50dffd9a5dd9","sha256":"ab1017902c55294ff376aea62056d411ec4d42633bec7317609d0487996265c7","sha512":"8a6232a236cb3331ece5a6e3931a65c8a81facf54538ca1519b7ef43206482fd4c14a7c1f096060d20ab3174d64e351c3581d33bc3b97616c79a9cf7539fb78e","ssdeep":"192:SnfYOxKyxdyxCyU4ylD2nQmVgsYOkv0BsYOkv0K:SOQm8OkaOkj","tlshash":"0212646cd9ba093d606770eb0a9f4609a1a1e1073d49eeed7e0c63505fa603cd0f7789","size":9498,"data":"","first_seen":"2025-06-30T15:48:55.553225Z","last_seen":"2026-03-24T03:41:29.825399Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1227\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 78e84718-e4b8-453e-ac01-699738108e58\r\nx-mbx-used-weight: 16\r\nx-mbx-used-weight-1m: 16\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: VPdPyhCBoQkdE5X3kKVMr46UNOpkuV9JgaK2p3DOU1ZJUrwqi5yPPw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4039,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6fcd0f905d5504e819f4a93368800829","sha1":"ebd9239ec02a307e64c096c1595f386cf4bf17ee","sha256":"f0b25d474f25b76a6b3c785bdf4ec9805583a3fe3dac556a666a75b58c252884","sha512":"2218348fb0e4b9f532d1f4f3250abe22d2902c2d32582acefeb574925aef43a263e6c313f0c34a53f35ef8b842beb4c471757686e92bd6639d404453d8a7586b","ssdeep":"","tlshash":"d08104910b9647b4fb364d4933a1f491093b745feeca4fc495a11ee738e14b21a08f47","first_seen":"2026-01-20T02:20:37.576137Z","last_seen":"2026-01-20T02:20:37.576137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/css/vendor.css","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/css/vendor.css HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQTaPkWdlVesj%2FHCEVNBxBEm8nRz96CzU%2F3L6KKodBtLKawyV0W4xMmL2ZysB%2BDBiOopYT6ta0bJOjO7vdk6n9N%2BzADoGtLoids%2BXmn9LBE%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fbafd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260705,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (395), with CRLF line terminators","md5":"043c864cd4ec91e2a6ba91dcf4acfc2d","sha1":"bae6e421b6e1e2a1c0bcbf72374051a7c56b60ca","sha256":"7989f78c0822f01cf9178e6a09ad166a98216740f1eebd7fd58391ce4023b204","sha512":"0dbefd753e7bd2ce3799dcaea026e6572815f9dcb70549a0c16ee6c997e9519f92d69d7aa5d84f155d615e5882da6a7a2a43c728f9a0c487bc137c14fb3ff202","ssdeep":"3072:c8lzUzA9Wk62OkJIrf4g54GntatppuRnSgURBC3IT6E:dYuE4g54GntUuv94uE","tlshash":"df44a634e2af70ef12176b7cb7f49b466f956263df0b8aa9b0d9621801c16f835611cc","first_seen":"2025-06-30T15:48:55.490185Z","last_seen":"2026-02-13T05:23:55.43448Z","times_seen":18,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/t5@2x-26bdeda095e510a.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/t5@2x-26bdeda095e510a.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 27304\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLBw4abhzfdehw7AzUn5wn583t6nkiwYapEApCIjAbIvywjuFHk2K927JYI1Qc9L9OqlprnsHPGHoFF6hihlUNB2NDcAvkK43MJ5YDxEMc8%3D\"}]}\r\ncf-ray: 9c0b174feb1b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27304,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"f5cfe3f2bb243ee06dbc19c897a93a2a","sha1":"3139393e2b5e5d24214d3c06aff9e27262e404d3","sha256":"844a5f69d07a335be475969064b14d5f7773771e13e878d5d7c83d95bad63c30","sha512":"cbf12423bb88c93663f8e7932619963abb770e233cc230d2700757e2824736c94a326c7557690ed961e411bc0a5b1558780c20232f135b03e78ba0cf96c00a8a","ssdeep":"768:Iu3UsM+abr7EL/TzGZqapjIKVes0c3ILL:J3Us7aDW/TCqasEt0cCL","tlshash":"63c2e12b9d45a4d0e2c338fa6fe09066f147f3664891b1992ebe7ef2147d40b572c325","first_seen":"2025-06-30T15:48:55.478515Z","last_seen":"2026-02-13T05:23:55.468655Z","times_seen":22,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w10-bacd88bdc823113.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w10-bacd88bdc823113.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 7514\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8B4FwZ6pbEYqmKLKS0tbACKnCjVOQLALbYh%2BsGLqVbrplLbymQXMTXsz7sMXRnFgOeEIHgzMUxMCgCP8y59f1vhIRbBn58DGMv9nWm94b9Y%3D\"}]}\r\ncf-ray: 9c0b174ffb26783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7514,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"20ef236f788bd680444c67f1d4e369b8","sha1":"5a47569fa9f4879c8de41a5d35455cd5246c9658","sha256":"43a3b673153717f2584cadff30e27e1db947fa2e8f9988f3a413e2d64758b938","sha512":"6c52562e53090cd9daf50d604b55f5489da143609b44296a12570bae4e5f4240dca58b7160b717b05998834a30679918a9085bf0638dbcb8a3393ef6ee1e63b4","ssdeep":"192:sBcoE/41XpDu777VmVJfPvqegLIM2zUAC56LZ43BNE:sBcoE/qXpDuYVJfPZgnfAVx","tlshash":"95f14c97b3294db2051fc14df18e103675aab108afe1892ded257d46e320b643eb07e2","first_seen":"2025-05-02T12:30:37.971919Z","last_seen":"2026-02-13T05:23:55.489391Z","times_seen":23,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/css/arrow-down-square.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/css/arrow-down-square.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/assets/landings/3/css/main.css\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVlZxtgJgfPGYmj3QxONa4i6xsbHWi4BY%2FSFOwKP%2FDaio%2BlzdkWnYKALUyzQU%2BpvDJ7ijwzZAwQY5UzLVc91D0DKdvJSsWB9mkXalyevGyc%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17557b84783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1017,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b7508f44fa253c0f0ee25ab6afeec14a","sha1":"5fab01cdbb77f963a618a49393d80b412b41b0df","sha256":"80ba95fe7ce8eef427ef90e23fe113108bfad6fcee07786dda8e1aaadc24320b","sha512":"dcb45f72a81c203117013c040ef9afb45f96059241913abab4352551c54f3daf52aa202f68656af0792db2497b33ec69b8de657be420d5ba4b21e0e89e565cca","ssdeep":"","tlshash":"7a11ebf1d3e49280e0832b38f8202911917e713cfbc84fcc4675a3e4e2755e9748c0a1","first_seen":"2025-06-23T06:39:12.978283Z","last_seen":"2026-03-22T14:44:26.337743Z","times_seen":29,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/fonts/inter/Inter-Bold.ttf","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /fonts/inter/Inter-Bold.ttf HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/assets/css/root.css?v=4\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: font/ttf;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DSIKZ06XeC7hBuwgI5nBr7Xe7buzgsB0SD2bqDP7GeDW%2BHIjzy4zZqvIWyucRswZrhoNMwk7ijvsSJTsPGSRc1%2FdTQMJhehUWA5fMdxPNBw%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b1755bb8a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316100,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte","md5":"275bfea5dc74c33f51916fee80feae67","sha1":"48747b7a60086f97af0d373febcbd1f1bee87f17","sha256":"790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe","sha512":"0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11","ssdeep":"3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF","tlshash":"08647c03f313c35dc9172d3a8b92c7a0b327bc926b12e10ab7243a55c99b4f85e6b5d5","first_seen":"2023-05-10T15:50:10Z","last_seen":"2026-05-30T10:28:14.644086Z","times_seen":1398,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1242\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: b55f87b7-c0d1-411a-b38c-8c07077e62f8\r\nx-mbx-used-weight: 12\r\nx-mbx-used-weight-1m: 12\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: sdY97mXtscqofRa6l5Di3e1Cg7VrL3m6IFgOMfLdSFK8BsdkP0Bq6g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4077,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1ff32f66132941015535ad4755fdae10","sha1":"fbd99bf978fb798f630e6771900c9449deca3827","sha256":"69dab84f9253da538804aa8d25ac89d581a1e866c10f32d629b61882a02b350b","sha512":"c88e9967b171c44e30a375b800cd5e2ffc0d704bdf39d328695839d660d8b8195d1ba012c4fd2d285a1dc9cd9d84b340d54bf935a63e96f05b5b0b9564a54e5c","ssdeep":"","tlshash":"6381d351dbaa977cff36881d33a2bc211e66705bbece5cc4c4e126a708e64b64b0c754","first_seen":"2026-01-20T02:20:37.580424Z","last_seen":"2026-01-20T02:20:37.580424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w29-d215cf76dd8ef44.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w29-d215cf76dd8ef44.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 15799\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYXvZgy%2BIb1GN2GTbOI3i2Q2FYGdRrEoAK8xKkCu143lWYKt6YVglh0KOL6XTuIH6XYAhT%2Fu1E58tjL%2FqMz8LhBOICIdFXzLYzZ933x%2BOoM%3D\"}]}\r\ncf-ray: 9c0b17502b3a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15799,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"f1ef27d807fdfb88886fb82eec70b3a7","sha1":"c2fe9cca8de153ceb64bd793d4c91f361899f923","sha256":"457ec826dda98b81f65f4849348bb83dd4226928097ca2c0e6ebe8dfc3086c1b","sha512":"5f5e0017f76f022b701328b17b0d1ff6edbccb1893cf7d2080e6e1225bcb96322cef6d9077de2948076194d4898b449a113dd26689e7740376e51ffb34517039","ssdeep":"384:RNOfU9xYXQ/KQBZrdJ+fFIRkOIe2/C1NX:rOc7cyKQ3dEfFdP/Ad","tlshash":"6562d01d924a4af752d5882e6ec390d201927a0cf4c2857e9ff144fbc40f7786ab6d4d","first_seen":"2025-05-02T12:30:37.987388Z","last_seen":"2026-02-13T05:23:55.454287Z","times_seen":23,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/js/main.js?v=5","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/js/main.js?v=5 HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eptitEgrzeMPHl5IwZVFM7tcRoZQqsHVQs6qjeZXq5%2BeJSydpOsaoJT3U8K0edBMpWqROYfnWovw8rGDXccbbUlkyDCFR9iBx8jcqTDdAoM%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17505b50783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21249,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (430), with CRLF line terminators","md5":"c8129e7a736eb7ab1bb4ee9f4d919fdc","sha1":"268925c35b15f7b723c0c4ff913610f7c22bbd12","sha256":"0fa2bfa1e742acff380af5b6ea26a4cddf165f7313c43d64cec77e2de97ab7a9","sha512":"5efb0f92dbb776182f79fa6ca42a0f22e44b753fc11a335a4de33b46b1a23c6d47bd682063b010144cd32e00a5e7bdbfba5db45a0049339b7a0db0388da2318e","ssdeep":"192:GVH2ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxg4S7/:GXKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"64928298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","first_seen":"2025-06-19T20:02:29.443643Z","last_seen":"2026-05-25T10:16:26.607875Z","times_seen":279,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/header/p2p.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/header/p2p.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 5440\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGL9E%2Fdk2N4FEoHE5d9tWTLC0SEhEGMzeiavXkjQSrmmZf77wtTSA7Ayd0scsdQ1cBiNbpKjgnHBVKVF6sGtYb8e%2FOMZQuC6m6RGKXl%2FWJU%3D\"}]}\r\ncf-ray: 9c0b174fcb0a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"ecf394d33dfc28501d3f92f99d490660","sha1":"0a51f4e56a04e40a05eae931cd68d86750a2c43e","sha256":"e003384304ceacbe2ab8f0abdf2ef74e1c8fc3b2a58c93a43d46afc0c3499eca","sha512":"c7489bf8a174dd7b4ee4ac736be0384eaf9a8601e60f777faa9d6c8803967400e579dcf81536182ddd4535667f252c5818038c9c2270c768f937c0d6eb66d42a","ssdeep":"96:+cVYcgk0I8QIMIat2wU9bmdT5DdlBa6hUGDN:wcgkrMa7HBaqZ","tlshash":"62b1d91ef92231d0224dae7725ec61155f3381979a81ac94f9cf48521f142ab1c9b6fe","first_seen":"2025-02-15T17:58:10.485235Z","last_seen":"2026-05-25T10:16:26.567085Z","times_seen":382,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: c0193ea5-5452-45f9-b7e3-d949aa0a3d87\r\nx-mbx-used-weight: 28\r\nx-mbx-used-weight-1m: 28\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 6jIn4GSbrt67JBQwLTt2eXa4sCxL2EO1Vhnj-wX_PdynWazd_0B1Kg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1197\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 78e84718-e4b8-453e-ac01-699738108e58\r\nx-mbx-used-weight: 20\r\nx-mbx-used-weight-1m: 20\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: U-Q2K_jMrrPVS1mVG7jhsObNVtB47cAC_drV79ghCA0QBB9rvBUK1g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4063,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f4435396c3ae9469b7b5101592e5773e","sha1":"e9b178bac391ddfd78fa6c06d1907eda8a7030a9","sha256":"0254159ab9f9b0e6980bc20cf10013c05ded2b24b2dc76877e4c8f79f4508f76","sha512":"c60ab6a75e20545258ce232bdbba237dab8dd02dd59c1342203f6286fb157f87b449613eb33b8207197b3d39419d08fd6509cce201ea9903f4858d10306e2488","ssdeep":"","tlshash":"6981f6910b8607b4ff7b492937e1f8a21b2a704fadc94fd0c8e5266388e1db25708f55","first_seen":"2026-01-20T02:20:37.584269Z","last_seen":"2026-01-20T02:20:37.584269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w37-a2c6deb54cb4955.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w37-a2c6deb54cb4955.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 7255\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MT4KY2LFL2Lh3qRgFChFO8J8u%2FrAr8rwxyJUvQEpMceM%2FK%2FeztHdmIikN5cXSWIo0%2Bu3J8qVWfTkXF2FtnTXH00OI51Wh86MmifKLWYOEWI%3D\"}]}\r\ncf-ray: 9c0b17503b43783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7255,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 362 x 146, 8-bit colormap, non-interlaced","md5":"e616448b81b53c3b2227fb1efcde9bfd","sha1":"2e5808f08c1a081c2eb131bfcb14340dd8f5800b","sha256":"78f20b81dc1f5ee52faf3d2fae6b14b0e05eefecc0230842d69bdc155f83a6ed","sha512":"cf2d6929a353f3be8b30f27c7dca034e9592efc6e548682f1e45e72a2336d3226d12efe96eeedf299dff24656df48593f232e75fef0df53182ff4d092416eba1","ssdeep":"192:P9mueuk6PGcpbcMz4/Murmp/VyCTiaixSyFUt9OY:PLnOsN4/mJUCetx2OY","tlshash":"bee1afc83240ff67910f2ca2a4626aa18c54a18fbf3081ddcd45b83079cb4472af98a6","first_seen":"2025-05-02T12:30:37.948628Z","last_seen":"2026-02-13T05:23:55.516613Z","times_seen":23,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w42-803b64b76e3c933.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w42-803b64b76e3c933.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 3506\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8u849%2BfzKkzSwnWC7gVDZcGszWiXaFlTTWqvKbrVhfeEKI13dFoSJxdg7o2j%2Fx%2FQGwB5CpHu6tSHXh0wQU121%2F4VfsKODOM22igNqFJvKo%3D\"}]}\r\ncf-ray: 9c0b17504b48783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3506,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 144, 8-bit colormap, non-interlaced","md5":"9ea2550e3e6ac746d858eb5bba15049a","sha1":"b1bb41d83f59c7c777087c8441dd1270660af161","sha256":"f1b8b42681690a09c36f293119fe1fa0bb75dc1e631b346481aae1b9347ff4cb","sha512":"a9223405c5c9689e57ce70294dd3062a9683e913256d1c7a3d1863b8bf4888d3f55fc5447a4dd8ec0f9f9bdbf2af61799ea062a8e943d57fb2d2d3e0e3c4e5f2","ssdeep":"","tlshash":"5a713c8cbcd4ebf7daeb21b56a4a3408a57151264724c94eb1ec7938145e2b5eacc603","first_seen":"2025-05-02T12:30:37.963754Z","last_seen":"2026-02-13T05:23:55.436581Z","times_seen":20,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/css/element.css","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/css/element.css HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BrgzAMicEEhb6tBS%2BUTsfpHvxSeEA9%2BWH6TLeiGv42AniQjfgGofT%2BswLESzvrGymt1i%2B0QeEsisc0MWhQF4VMRZe7CLxXgd2sZIkdd6o8%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fbafc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292111,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"5bdd1e5a7345fa31eda092a1827bff83","sha1":"3529a52b99a8c61cd5639e92ad147bed86412843","sha256":"24cff60f2562885def14a4eb4a99017ab83f050536af802aa490f285fb4424ff","sha512":"61022cb0f0cb545ac661e2b0c3d7fcb06c373bd8b0cd030cb17e2213bf933131f10d5ee37bf19cf248adb8d13fe85a37ce214e3c3448b89dc46476f24edd7566","ssdeep":"1536:6mTW2oB6pEzSlZEDA98pXbXZJxnrCE5MThwLYVPjlmVRmJDPRQhhj8mumbwbKK+j:eL6wLJ8m3bGKpIT6une","tlshash":"c5540026ab1720cf1307af9cb7f06f925f140271992bc5beb1d1388c82d586866676df","first_seen":"2025-06-30T15:48:55.451845Z","last_seen":"2026-02-13T05:23:55.483372Z","times_seen":18,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/static/fonts/HarmonyOS_Sans_Bold-b04efd429005b64.ttf","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /static/fonts/HarmonyOS_Sans_Bold-b04efd429005b64.ttf HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/assets/landings/3/css/vendor.css\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: Origin, accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-language: en\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tmnZLXmXkE%2FvTTIx7D1es%2BamqwbHnSLiD2BElWgLdztYpjISr02dM%2BPsVCGn7zGTYM2b439QSlAhu6M6mxAFOaKNZaP0G%2BPdFM9Y%2BCXN8tM%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0b17558b86783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":74077,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953), with CRLF line terminators","md5":"f1778cc91096d5669d3174f269846152","sha1":"6ba061c9871d036c16a5afc3151bea7d1b2873a1","sha256":"c23aa8c53bec44039d388ce1d640e7cf00a019ca35280dd9ede5058c7773dd42","sha512":"af69e92adefd9a9cca9e1d3eb7111795240856c3165aa63c6bab2071df1f0627905a5145008310b6d217fc58ba795606af624ebfc31b4258ecbb967dde23375d","ssdeep":"768:LbqfbGhM2EGWUWvbnK44447zHItQmyu1G+OY+:qfaENdnf4447zHItQmDG+Oj","tlshash":"3073726065c0585281378398a6b297a9fa6580579b4ec68472fc3fc79ff2e81cec351f","first_seen":"2026-01-20T02:20:37.587857Z","last_seen":"2026-01-20T02:24:22.434842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/api/getLocale?v=2\u0026lang=en","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /api/getLocale?v=2\u0026lang=en HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: lang=en; Path=/; SameSite=Lax\r\ncache-control: max-age=10800, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uE5a3sf3tnBnDuYgDubsgDC%2BqNw1c9E6OiJNwOxYouOY%2FHIaTT3fNqbz9XIETk%2BW5%2FXDwGR5Ti6KTRw2cRd%2B8YJBZeaK1EXO5rOoYGjWtzU%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0b17561b8d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86557,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"455ef88b6e806dd36e01933cb8486796","sha1":"b34d87ca7b8fb0749e96d927defa59d79b9f947e","sha256":"4514f085486a4648a9d69c34d7a860374b4c6a26fbe5dcf57179c1e958c62dc4","sha512":"b817a42fb61632c7f5de86020b421452afc1fc1c14f0525cf2d9af8d40877df954bfca9ba83fbd107610dc419925255480cdf46d5b2f2362897334e8f1ea52a6","ssdeep":"1536:TE9dI8XPwE4MmEFG4+0c+VVSWelmDs1seF:TE93XPd4Mlw40+VVSHmDs1P","tlshash":"ad83f90b991e3d720bc613d1bcee5ddc71bd024091e1906a5aee84ac16edfc9c2e7897","first_seen":"2025-07-17T18:01:15.430578Z","last_seen":"2026-04-06T17:19:52.873458Z","times_seen":80,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w13-ce7fa1a2227a559.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w13-ce7fa1a2227a559.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 2820\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8muAur54LMDPXg8dts3b0w8G4bcROgwZYPteqazY3dtGz9n5kYGCTYKR9GPNjeOsGQiPcoRzZLnSTb7mJiGbR2bnbkuuUhmjyPUTn0AnBZE%3D\"}]}\r\ncf-ray: 9c0b174ffb2a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2820,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 144, 8-bit colormap, non-interlaced","md5":"015b9a20c435851c2539228d8cb20dd6","sha1":"aa9a3ad41182e05fea515543db6112d61e3d711b","sha256":"d8a3dd4ba237f755ea6410baeb56ff0d618a3c14f8e250123476c0387244b571","sha512":"c8ca516e80e1bca0a0bd0ece899a29126168cdf10ffa7dd1037ba0e6697513f70f73036ee4dd9cc648dca4d9154e4ab0a6ebafa623ab40fd54a1d034d38d97a4","ssdeep":"","tlshash":"c35118e31a22e647e1631d12a07a0a9d745dce2802f64a41d4a23b158e7188e99c87a2","first_seen":"2025-05-02T12:30:38.015931Z","last_seen":"2026-02-13T05:23:55.387401Z","times_seen":20,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w41-a4c23930839b720.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w41-a4c23930839b720.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 3247\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mv4NRswWsaUHHPdx4g6o1SeV5WmHVtNetabOERDcZU%2Baso%2FUfO07a%2FnG6K6m2U50Z5U5V5FHcdg2%2BC6UPiHTNwlShcGTzR6siyeNcVNUeUE%3D\"}]}\r\ncf-ray: 9c0b17504b47783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3247,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit colormap, non-interlaced","md5":"af0c369b269d052b3afc7341c4cc7c7c","sha1":"5229cb9be827ca69d70bb6c5e003ec170596605d","sha256":"c0f25fb55b73d78b22a68a32d2d327fc91516af4f75eca8db6349c04596bfea2","sha512":"9ffc38bfe01187836b5f8e39923ac4c529b7ce490eed0c02e6ff4ebf462756d638ae931d626600d73945375de24f61178467a52b37f9229e9729d65dfa80c442","ssdeep":"","tlshash":"c2616ce6fe53f7d4cc121df056b86e883e9a8c814b00ba2391523954c164c767c871ab","first_seen":"2025-05-02T12:30:37.954452Z","last_seen":"2026-02-13T05:23:55.458192Z","times_seen":20,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/chat.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/chat.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9L9GiPMSJUzmBXzV%2Bo%2FdsL9OoiSDMV84wg2RQFw8ghBNP3OmnQV6VfOU3n8MEoVjg%2Fa3h0hqgKX%2BmcU3adBxRkh2UY2x4qBUV51wOuB3WMs%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17504b49783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"856a385d230e560529fe4f70a442cea9","sha1":"c9669d3c47705149e26efd24e0d3ed738fc03069","sha256":"c2b05ce3c22fd9b07bc627c2ace70217eb0e3dc2183d9d4aa58bd482dcd8d7d5","sha512":"10308be3d10aa5ea28b1c8a026b6008c530aea11658680ca9b54af0e06e4f7e7d7b1831326d13cc915f83bbc4d1e8b5e67e630a42b8bb898c713875ee3fb2959","ssdeep":"","tlshash":"fd2168e66fec96a6d35e833063f41fa62b4730bdb6408d5f8680dfb0db051aa4144ad8","first_seen":"2025-02-15T17:58:10.491189Z","last_seen":"2026-05-25T10:16:26.561439Z","times_seen":486,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/header/cross-rates.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/header/cross-rates.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BnjV1APGFfu5dD9Egi0diU51PDd3AKNbVQG8lTOaQOqBvi6rVySj3KGJ6f3spHnwXSu%2B0t1hwOjY16pbXG4mLmFkfivB%2F08BDngvaomXdw%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fcb05783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"02be597a3ad6a955e4e583b457b1e190","sha1":"823e50a255fa3017ed421dca17572f441a925f24","sha256":"8160468486c656c080fafa23f1287f381beb1e51e41c0bbcf61d712fe7bbe735","sha512":"0b147ed6219aaf3c56a216ad6ed39e08876c8682d5017374d19bdd9689fb36a425774e954209f3ae51991d4d4da48865756116a10956d6fd4f5c4bc35d9156df","ssdeep":"","tlshash":"1e51d943e378e674aa4caa5d71503a50667114bbfa30908887b61fae1c437dbb284e35","first_seen":"2025-06-30T14:26:49.339654Z","last_seen":"2026-05-25T10:16:26.565922Z","times_seen":119,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/header/technical-analysis.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/header/technical-analysis.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88kgBqjKrhyiQUPQaej4eOgDGiS5qcVyB%2BRcbs5RIRoVEFJrWv2fjp37sYHNomv%2FxFiIQIh99UqQcP71DiUOqYTEO3eG6Z87KFaA8chA3UA%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fcb07783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4cc28862b6416e60ba997d56c9a0c458","sha1":"96ddff9441ccd01b2ecb19802f2876382212d930","sha256":"e1d29d93771f480610f8a75c35f3aae9d0ed536342fb62bb86dc1461e10e6b2f","sha512":"29577fc1da20133cd20a2e4737ba6c63579c28e690905dd5049fb1f81c658347fb0fb20ce63a2cbaadd0a376007a7ee5f98144fcbe8372e7c3d2b462cd4e6fae","ssdeep":"96:+kUAfxrpn/Blg7arcU7pV7M3qIkLmgKGhbmnJRiUDDVod96:3UgxrbqOoq3KGqfDhoH6","tlshash":"6fa1738b033cc2f877d8642899723642367254bf5678a108f3bfb8263747f652255d58","first_seen":"2025-06-30T14:26:49.397587Z","last_seen":"2026-05-25T10:16:26.614701Z","times_seen":119,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w33-84698a62351bc20.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w33-84698a62351bc20.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 12372\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ul3t1ZqpRhCUVYGGhIU1JUuxkiE2l1z09E6uYpRs7Z6mL%2FDUWjjk88bNRwPdWU%2Fsw%2B87VPT9wt1fmAxf2%2FjI5Pdm2%2FJlOjH52yWTSdIkGOU%3D\"}]}\r\ncf-ray: 9c0b17502b3e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12372,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 362 x 146, 8-bit/color RGBA, non-interlaced","md5":"fc1b3dc845eedc0d1975b74f881d0afd","sha1":"c0fc10a43e7718fd1dd30bdcf8f042b5e64a833f","sha256":"3f1807dbcc9df79f06e1d572d40976e8fc689f23cf0d3002dd1cd2274183c892","sha512":"42588e2e23c80d1d3fc6bb29a033b26339228a72b7ffc5f5015dd48b4f0344cae7d87f6af0eced5ee1218bda3cf6fcb20ba4b4610cedbf99ab872051722ffcd2","ssdeep":"192:4QGn1ZVvbXj8EcQ99eq7NET/hvR/eFfib1hyC83WXPT1LvjUNp:4Tn1Z2Q9PE9vR8U1R71LrCp","tlshash":"1f42cfa2740ccdc367c37f85ff0e9fa853e7d07996c8c9128b65a7ad4900c9299c9076","first_seen":"2025-05-02T12:30:37.99699Z","last_seen":"2026-02-13T05:23:55.4799Z","times_seen":23,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w40-d458e8feeb9d0d8.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w40-d458e8feeb9d0d8.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 6980\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NiHQu0WXPtpCqa6xnWeJWPRPlFqqLRscpNA8AY7HXyHfdgOGlCPR6J9lPHtqcceoq2R0RjLy4pI6wM5RVdN2WUt0lZyxvPFIV09zvBkn2M%3D\"}]}\r\ncf-ray: 9c0b17503b46783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6980,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit colormap, non-interlaced","md5":"d06b592b58f60d4a139a1c54fa7e6b2f","sha1":"74c49b1defd7d8a6a33adfe6c292385827490edc","sha256":"f16882a972ab92b098092890d092a57f5e65bbbb8f7f779b03ce4236f1a86b55","sha512":"bb0148f38795270a67f05dafe8944483c9c1ea72f2b6c4f1262dfadbe9fdf7bfd7199e73c40e9ef0da77ddabf2bd3ce03f592e3bccdc8f39475a90405b8342a2","ssdeep":"192:ixXYm2PSvh8NphXLl2TdAbPZJzvIPrA1DL4CO:iSmKN/bkTCLgzA1f0","tlshash":"64e1aeb0c42ff67fb02329df8752824cd780a10c3114e65d76baa39365404eae70947f","first_seen":"2025-05-02T12:30:37.978151Z","last_seen":"2026-02-13T05:23:55.39542Z","times_seen":23,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/untitled-app-modal.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/untitled-app-modal.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 9947\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGTjfm9j9a9EMJtW8YXM39g3T5n8TMHIdplvY3Q4tqRdKWASp%2F%2F5dlmEee6Y2iR%2FiQRNakwJJyrcK4bwX6G9EHj2UIGU52GkIigeRmipbxc%3D\"}]}\r\ncf-ray: 9c0b17504b4d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9947,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 345 x 252, 8-bit colormap, non-interlaced","md5":"5559668af3e553fc871a55adf3347819","sha1":"4a699964c855c8f83c2610de0af2419a71257c8c","sha256":"8ac5dfb6306149a3edebaf77bc100de9ffa8af46e56b8bc79716fc701e207617","sha512":"e0edab55aac4f8d743e98bbb7d52ed7c5b1f5b32c84e8cc271015c10d57333c2b458f30b4eb5e41e0c7e91b02dd46a8cf30b9653a3e932949413f85021485967","ssdeep":"96:JHrmqk0gW4mwLtat2J2wx1Q4Hs3NGlGzribeTnSodQNDirGQ0rNpV6x/ddcEoSa8:JHrmqk6QoqeTSoao4pVCdHahAob+8RLE","tlshash":"3b225ba49f9578c0975e1e73b5e5004548330ae7cdc2bd4abdce542a0f28b819f2b9d7","first_seen":"2024-12-06T22:27:57.026807Z","last_seen":"2026-05-11T21:14:43.174081Z","times_seen":384,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/css/cryptocurrencies.min.css","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/css/cryptocurrencies.min.css HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNi0ZvsVozxNIVv6VV7dNIcM%2FoFbmmEOSYnW7IjjWNo9g3kh8D8XHULCGX%2BMQ11IPBoKeuEF8yR4r0AznfXvYBdDlW8P3Jswro9XWPFQOEs%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fbaff783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2328,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2328), with no line terminators","md5":"1ffa081199e771e8299fecb433dd7e6a","sha1":"d3d23816095ba249688e91a297ec15fcf47fd633","sha256":"13d7e91dfc4f020ef0c31b52da110b27ed06ede7f2bf45e8f2bc978c89314303","sha512":"df837679efcca1d534bd82fe2be2a03e4278d5a02bb82d684ac2f065e351801fc4d08938414bf219ab1bf69bbf405590434f00af67c8d5e4bb2f3abada6f4eca","ssdeep":"","tlshash":"5b41ef3395407708d027d92887f802ab916ec427b02623fd79667617c7db7838bb529f","first_seen":"2024-02-04T05:15:42Z","last_seen":"2026-03-27T16:51:04.989359Z","times_seen":51,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w11-ba1b289ab70e208.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w11-ba1b289ab70e208.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 9639\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2%2BaJkCvJwy9SMoZfGTTQMPqP1qLh5DlCWyZGQBNXb6BejhGOwhjqUXT18tm8clZb0NCSyYDQMgHTOTqrNVp3sLXr7McIyy1w2GrZQX7rKY%3D\"}]}\r\ncf-ray: 9c0b174ffb27783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9639,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"43b7d2288318f7cd2dce6bb89b2676f3","sha1":"81516165a73774365c5c3167adf875cab1cb2c2c","sha256":"f1005dd9d71f229310d2e30b1ab8770a55b521f280cab59518afae74adb18ec0","sha512":"9237515e2dbde15305c0ba371dac67875e91d07453a4bcf4723598225a200ee2e739511e4afd972bbd286da04202192423f8371eb06091d5628edd4163912e8e","ssdeep":"192:++mH3sPxYv0FDZ0BKcO+PgEp/1S9fe+rOB0a8C9NPvwz4VBU84CcrrlMZFH5RRJC:++I3sPxjZ60+oEFsZOB0NC9NPvj05e5E","tlshash":"d1129dd9c8c68512d68e4c567f4c8fc26905194b767ca0ccfe83982c470b5bc7c8ade9","first_seen":"2025-05-02T12:30:37.973146Z","last_seen":"2026-02-13T05:23:55.439748Z","times_seen":23,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w24-b280e9f79aee72e.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w24-b280e9f79aee72e.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 11068\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BzQDYcW3DIM2L4dgQABHS85XKG2bgryUnK7pBTwW%2FKF8id5%2BTQbCVKReR8h0QRYCuE888y3cEjIVh27ufIOwiaX4tZU6Ykf8pUyKlZ3n6Rg%3D\"}]}\r\ncf-ray: 9c0b17500b35783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11068,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"3e5743dbd3a26d3818fefcb76b204b13","sha1":"12db6c4869d30849004427067e86b77bb9ae7b68","sha256":"51ce2f576d26eabdce4063fe431e4035dc42914c42a94bea746880b6142bc39d","sha512":"1a9ae72dfa04f87b297058f3a8a9a6aa2f582ffd629012f0e0f265fce2d088d1e8e2b922c00d2d4c209dd4d144650e3715463ddcafbe9a450f7de628106386e0","ssdeep":"192:4FlG93L3XTxIEG6zUHSms8zqk+pWuHCyngksayT6SlT8KW9JVoNz5LDNmmmg+y:4zGN1XGtSms8zvYkynXze6S6KyqNzlNV","tlshash":"d8329eba8b18509d2463293081a2ffded9740674a81c5227b75b4f732d28ae38033fd6","first_seen":"2025-05-02T12:30:37.939029Z","last_seen":"2026-02-13T05:23:55.445692Z","times_seen":23,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/domain_icons/16_1768491294245.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /domain_icons/16_1768491294245.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Thu, 15 Jan 2026 15:34:54 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oqt7%2FGMcuxUhFVwmwQctBsLO3EziimOt%2FM2%2FXWQnbod9MqXzCMhn0j6VE8tY8xAnoRNkEso%2FKD5Oy%2BTCnz%2B%2F6Vaayvmwg2%2FEMfohOnr59uc%3D\"}]}\r\nserver: cloudflare\r\nage: 1\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c0b17581ba2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"fe67192773a868e8fc963a9d7336bdf4","sha1":"88eb8268d1099dad20d55018df69e93e898f2d7f","sha256":"d4e91e2ce107eb477af74af4287f81141ab575facb264740f418349b1e24268a","sha512":"4300eeb4c1c09cf9264121a7e3f62ef5690f8bbd945173e9b0a9a386c7f4959018cb21ecd0b0abc39565c37812b80e3d5741b9a816d598bf253de29b6c0ea536","ssdeep":"","tlshash":"f6210014eaab1370ecc747248835d9f43b5ba09d6702b77cc076a320711ead9ca80dee","first_seen":"2026-01-20T02:20:37.59565Z","last_seen":"2026-01-20T02:24:22.379793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 5c8935bb-13d8-4e65-8bda-cacae2491a66\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: jaQZsiWLE7YHS21bEUfZIMIqkwUkZm7ed4Ok2O078LUkUxS1ieGIdw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w8-aa7389b4c62779a.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w8-aa7389b4c62779a.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 15067\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8Yx26EOc8iPY2dDKi3Ah82CqRWSs0oFw2j1fmHJJAwBerW%2FXk9dv5BMKVrJzGHmv8TURWGnVRhflczo2w8r%2BLdyeRD9YHY3YFIZZimMu8M%3D\"}]}\r\ncf-ray: 9c0b174feb24783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15067,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"c3596cc0df6feb73420c20b4d07f03c4","sha1":"0ce2121153d12792f87c23bd676ac268a4c9a52d","sha256":"e5a62fcf6381077ea4f1f13a20a3b5a692f44e6c850cb07c4b7a02a6feeebc49","sha512":"b0cf31168fa7d272ea56af26127aba4eacb1b824606c91758d5f4d8cc75253c9c0210c5e304d9e1743181ea4769ca6b87d0b335d01c06a8978b34f1989598a97","ssdeep":"384:RVgqomElAT7TFTo12T5WqLV+24oh48lsHlYRUfOGna:RVgDlATFTo12Tgd2Fh48l8lu0Pa","tlshash":"ea62b0b699c1406bc90a707691e799d2076b7cbbbf16c4905c712b68f7c11df3027a8a","first_seen":"2025-05-02T12:30:37.966555Z","last_seen":"2026-02-13T05:23:55.448194Z","times_seen":23,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w32-9de4c2346c644b6.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w32-9de4c2346c644b6.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 9102\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PiSuCVsKnACmJZ2%2BluC3%2BZwJOktqsmOaZKPFEgp7sZQJ5Ab96rGSuibHDSiwoiEGZ3PgouUD29oDDPxVdM6wMeQXR9QfigHuseEMGYUaHKk%3D\"}]}\r\ncf-ray: 9c0b17502b3d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9102,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"0c80e03ed785aeb1227a1432033f1d1c","sha1":"9cc7d26f7e313d2315281e0fb618c9b82b45214e","sha256":"12b24655d258d6b617af1f60f1f6f17d23c1934abb5eb8760c075cfcd2487598","sha512":"98e265aadf073e165fb209be50c68ed93897561e93f48026b0b19a8f01ebe64f5fc6ef1cf0c1dea10936d2d728229b1141ecd851c62c4d8017f7bb45adf3f31a","ssdeep":"192:6bVooou/71DBaHvQIBIeMrrYVxeDCGoxRmsDgVhC6sQFLE02C+C+tcr:eVooou/7TaHrB0MvOCGoxssDP6BFg02M","tlshash":"b0128e0713b6b08c985fcb7b632cfaf985b884d09d83e5280f79f0ae1c558994b1b4c9","first_seen":"2025-05-02T12:30:38.011126Z","last_seen":"2026-02-13T05:23:55.393855Z","times_seen":23,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/js/cryptocurrencies.min.js","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/js/cryptocurrencies.min.js HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6nBFjPFSeOEF4Mj6bq3eciu9CNoAypsy6ugSaddsgUTi%2BV6Jc2d0r6KHNtq0rZZHboxAmQrxXn8QBcxs%2BBVhFPFddy1I5AJgcDg2QsrmiUI%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17505b4f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"24cd9ad9b7bda9713ca2fc908733f1d0","sha1":"c882a0a0e3794423cd5985d90cc8542a17ffe038","sha256":"1e93a539f219669589c214b7eb9ef44a17d0b7d3db6b1daeaf8878694154537b","sha512":"040b75a122d4be4391cf614de748febb6a414579820a2e54307079b53edb246d926655068ca2e2b4e5c6674afaa52bf31fc0891df2afbfdbcfe1e7ea0aa805ea","ssdeep":"","tlshash":"a9d05e4d295820489f8d61efc07257889272046d39118596396a48111922c1971fbe98","first_seen":"2024-02-04T05:15:41Z","last_seen":"2026-03-27T16:51:04.962154Z","times_seen":51,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/css/styles.css","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/css/styles.css HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7IIO9VUOLGn3IMbWJEqnLT4alH%2Fbv4mZKZdvn0NOL0c9jpzNFjLC5JOhvoRvwC7gQTntdTymNcNwm%2BynjIC2vCSFA4d%2FDiNXUlOtls2Tes%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fbafb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-31T15:30:59.550945Z","times_seen":15964973,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/coins/SOL.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/coins/SOL.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 404\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aTSGqvfVO7UK5%2BVH0phLIq6sw13hZxCnCcE9t0x2Th4r%2FvDTm5f2qqH3tyrCoynpEJ5VPQhTFps9Z%2BiaXNgyW7QZtH%2BrNopqqFPv6MYfPg%3D\"}]}\r\ncf-ray: 9c0b174fdb11783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-05-28T00:26:39.936977Z","times_seen":940,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/coins/TRX.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/coins/TRX.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 1315\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qxwxBtmei3Hvx6l5Bi2nl1eumTPoQI8ixm1N36iU4tw968TlVthWBIWjoAIcPaAShnvo3RcOetMlSg20p9n15Lg9WWdOY7hFE8bQj%2FG5lA%3D\"}]}\r\ncf-ray: 9c0b174fdb16783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-05-28T12:33:48.01665Z","times_seen":1028,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/css/root.css?v=4","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/css/root.css?v=4 HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLX9IjrJ43RBMBIeXrnf%2F9XwBcv6X1%2BBEB9kXcoYC2wXCw9OFqGor3NeKk8jUIEkZOkP6fq8mtj7ra3kFurjywhvpudTtgyU6wQXfuGgafg%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fcb01783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468617,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11070), with CRLF line terminators","md5":"aae60af88f09730529aa34099c9a954e","sha1":"a8ceeb812ea7e5f794f095cc0fa7cb9a89651747","sha256":"e30ca4f03117d18001bd40b500fb64a6a5e7958980a15b918b62a441ca99d872","sha512":"77e70b87fc611d4979cbfe6ea0ff5880a781c1a5be989eb8a87e419f12aa1e0d7ee3385fe449855ff58a66bf214346c0b8ecdc336c4ebc3acea7eab3037acdea","ssdeep":"12288:9MlXqMl7MlXqMlXOMlX6MlaMl9lQFjM9MleMl7MlUMlkOMlJMlMMleMlX7MlXfM/:P","tlshash":"8f2583b7e546140341739a7b9bd3a378db7c40278b0160a639ee75448ff42958ba3e8f","first_seen":"2025-07-27T02:35:37.343068Z","last_seen":"2026-05-25T10:16:26.602485Z","times_seen":107,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/coins/XRP.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/coins/XRP.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 953\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RL6%2FYcrKdn%2BI4ZOuaM8jvhiX5Nku6XcocDnjPGzod46TZkGJ3kjLZgOtuJ3L7YVoCb2vfv7%2FYon2R43%2Fp%2F4KP1obf4J1LSYebz1%2FUjYIyTM%3D\"}]}\r\ncf-ray: 9c0b174fdb12783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-05-28T00:26:39.893175Z","times_seen":1499,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/t6@2x-c1d068607310f16.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/t6@2x-c1d068607310f16.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 22939\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mmDIfOLmOvToP4%2BEB1iQx9xqhljZl6pZATrVZzBH3Q%2F3XDFdJVOCAIusfdN9xO22h1Ma2tpTpW%2Bpfr%2BJtaWxY9%2F%2FucC1eJXcpQWMIEVnAU%3D\"}]}\r\ncf-ray: 9c0b174feb1a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22939,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"f94f0026d8c33c685693501feab0960b","sha1":"49603c597a1f367b0561043e1846b096ef0b21e3","sha256":"a3efc317424ab0b7a0144b7dad3151aaff3c039541fb9ae0444e8a30f2afdffe","sha512":"00e71756a66e020e0f12b5a07da983f4775cb2b868abc8d5edc9a838fb47ac632a153d37740452bf5dac06472f9740ba4b28f97ebca4d1d2c3979b3742332245","ssdeep":"384:S824bzqutdhL8kl4Z3G+jBjOIhjJUXovuxxRPqDXoG7+RU3x1LbRtBtN3L2piZyv:Sr4beaL8kuZG+AwSVx/iUEBLFPL2usKu","tlshash":"b2a2e1f938446986f8f1d7f3df5a22b1c0d4da0d5b92d231c3adb8a57a2709087e9621","first_seen":"2025-06-30T15:48:55.543439Z","last_seen":"2026-02-13T05:23:55.447194Z","times_seen":22,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w3-790317851e482cd.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w3-790317851e482cd.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 8475\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjBB6sdwEOJdhjulsbbhoL3ON3DPwTHqR6mv%2FZdi0aDc96rO4UD6PkBTBU8HrSjRbciKmLZ5qaBwiadyc8P2Xitf9uzWXMy%2BpC%2Fq7kVMMzs%3D\"}]}\r\ncf-ray: 9c0b174feb1f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8475,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"1211ba93e166a6753d658410f18f7587","sha1":"fb4faff65979a350cdcf5698d0b5a0f44d214dca","sha256":"646cc1cc42a217224da8e22e29794cbffc3ca1e55d0806fc5cd8a68ed0071706","sha512":"38d091b9ad53ce6db0bb83a40101b761afc105ceeca97847e00951ec5514889cc23f026994e15ecade27bb992c9e24d097771b6bd2fb4688888522d8248d74ed","ssdeep":"192:n3SP2mib6YNOZrdbVhlpuNDGo8DVV5xsef4pnkwGieX:3tmiOe+9oJ8xVfxf4C","tlshash":"7402bf878b041d68afdc66095b73d252bf16374092f0ff6c8cac0a0e617f2b08d59ac2","first_seen":"2025-05-02T12:30:37.959218Z","last_seen":"2026-02-13T05:23:55.470116Z","times_seen":23,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w34-6b6790b5d2e49f9.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w34-6b6790b5d2e49f9.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 6992\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnhiyBZ5zimGGcpb15F0w%2FXFeFGbrpvGRMtwaDiOzwgW9XMQiMlI2OhCjfAzaB9zDf6PHURKM5UA7DXHg1f%2Bc4mtfhkh8yNp%2BCJQqWh5zPE%3D\"}]}\r\ncf-ray: 9c0b17502b3f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 362 x 146, 8-bit/color RGBA, non-interlaced","md5":"87f60fe0087bdaf6037410aefdac093b","sha1":"93b3ab08af11d541514d5387fd0fe02facc0aceb","sha256":"e87f38627e475e31aaa662946c7f3db8eeff36e7d5f6281aea3c560f51115cdd","sha512":"389b2af298598fed1273e59003ed5604bdd21f72b35eb39d0887be4dc1e40e1253627093be24f64d60025efa794d7c8caf3f4d4a8e750c335e5508f8d15af87f","ssdeep":"192:z4nmMpMpMpMpjRIZ3hoKbRRy/ZyGUE2DKd1Nk3l9ZBWT7CCCN:z4nmMpMpMpMpqaKbG//UE2DKoCTo","tlshash":"8ae16d6b7565e0f78b0a6e10977700398cbee49f7e1b4255e488f058b9206533ef8de4","first_seen":"2025-05-02T12:30:37.976819Z","last_seen":"2026-02-13T05:23:55.440629Z","times_seen":23,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:07 GMT","end":"Tue, 03 Mar 2026 17:10:06 GMT"},"fingerprint":{"sha1":"82:59:95:33:5E:76:7F:3E:5B:45:F4:CA:83:29:7C:B2:19:B0:A5:C0","sha256":"A1:28:19:D2:C4:EA:69:3E:6D:8D:7A:20:FC:3E:A6:13:BA:59:C5:9C:DE:7D:D1:25:3D:35:68:98:FC:47:82:9D"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 20 Jan 2026 02:20:10 GMT\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49f2590313831152e2b656ca33b7fc37","sha1":"910db6f788b80561905582e510ed3a09ed752c59","sha256":"591b1c315e1d15fd0a13a83272e68f621d26092559ad6adbf0108012d22d3173","sha512":"65a0b79b9011b31f8b55a7a0ed8a5c6e55f992f775c21592c0502765afa716f01ef5c65e7abbc2d8681bda6ad804f2661072016fc5e529cf5dd007a9c1811837","ssdeep":"768:DDSDjDGDUDB4DiLDZD1D5CJmwBUiRDfMTcfFBhiEymDcTYeBai75tdmtC0BQiVPI:I0rAwyl","tlshash":"3de200a1041750009b838ce223cebf35fe1f52517142d0b5abfdab6badcbc66526936d","first_seen":"2025-11-19T00:32:15.532783Z","last_seen":"2026-02-19T18:58:31.233433Z","times_seen":1940,"resource_available":false,"data":null}},"time_used":1312,"timings":{"blocked":608,"dns":1,"connect":22,"send":0,"wait":36,"receive":0,"ssl":634},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1145\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 5a2139a2-d6aa-4563-9989-bc9ae15d92b1\r\nx-mbx-used-weight: 32\r\nx-mbx-used-weight-1m: 32\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: DOojBc9DwIaT0j95AUFnbhmi-nDWe8SrvcB8tsxLpe62oURJp6ES2A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3892,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"457cfb4e13bd6b6d6bf9fe84ac6e95b3","sha1":"c3f8328577788cba8e576bc50f162316d52f6bf3","sha256":"ba725333d801736aa66a26afb93f53432ab03673c2a6612223dc963aa2786d49","sha512":"ead5acc42394db780b8a44d6b4fb24bfd86233dc0c196cc5cfaac7b844bdae74e668e05aa0f824ad8b1515d1141e359b973ce650ac7dd90943133467a2deb0b6","ssdeep":"","tlshash":"9a81d1411b5a03b0fb768c4e3393b5514a6e7496aecadfc4d9a12aa33cf35b24708f11","first_seen":"2026-01-20T02:20:37.605204Z","last_seen":"2026-01-20T02:20:37.605204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1168\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: c283f448-a5d8-4245-8b57-5edcb115df77\r\nx-mbx-used-weight: 26\r\nx-mbx-used-weight-1m: 26\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: TSEYgdN4kNIlb_exTbnsUzpzotQ4RoEQmHKgxnhVldlnpxtfnuQ6DQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4004,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dbadb92253c6c9972925f2c92d2ea73b","sha1":"bac685fa70bf1b063ad1b2dfe09900af68046b89","sha256":"0e661f9602939e7c1d80310649d9a3617e5254e75099a2af4fa3bee4ff46ce0e","sha512":"2d776386ad1d47deacf5ebc38f48b7c1e44237761a600255c8427131b73a5b9df202172da889b816f2bfd9e5a9cffbeca1ab42c2fd7c4bdba6d076f3c594e4de","ssdeep":"","tlshash":"9a81b3400b5e0364fb3a885a33a3f8d5156a741fbdda8fd0c6e9556708e57b24b38f50","first_seen":"2026-01-20T02:20:37.606186Z","last_seen":"2026-01-20T02:20:37.606186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/coins/BNB.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/coins/BNB.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 2560\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qAjbTmB1qZG0GcefckUxXih2sa5RI5xEU%2FLbu%2BkNySk3x2G%2BGMmFP3USvafQN%2F2ceN5Qz0xTiKmjQu1OtKY5jOt5uTcBtDlzyc7y2nz5qQ8%3D\"}]}\r\ncf-ray: 9c0b174fdb10783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-05-31T11:06:27.490543Z","times_seen":1496,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w2-efc414581c2a952.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w2-efc414581c2a952.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 11388\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMjZG7Aa94tsMlKOApjKyzQkY1ltl0z4BcBQiQ5y7Lpi8Kk5ZBK4Z4VDHtRF0S%2BAfYt9%2Fu%2B%2Btm%2FZk%2F1ve627dUsRlSZwIB%2BP5FgPZg1CJTc%3D\"}]}\r\ncf-ray: 9c0b174feb1e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11388,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"b19b46a2e02b70ab28154b923149f382","sha1":"6d7d8e57fcc4e5151b0fffc5a76b9b6ceb17c1a1","sha256":"b65de26e331ec9645526a4fbf3c0a8e515153a0877a0eed585d3cd8278b44c7b","sha512":"b6c4e778b0b81d3381e65f7af190b55ab0341f45f5774e4326b3d07425ba45723ea61a4f440c260c624e768b2b5dbe70c7d9fef3e7148788209729f9d5522a79","ssdeep":"192:YxvPyw4WyDpQUisCCSF6XPipn0gjqY3dRszz25d/nFLB3CtO+KLYd902Gv+GZqGh:cCwr4KVpo2tDDsz6j/nVxCtO+mYJGJwq","tlshash":"eb329ff469d0e98a27e421ffc5a474d393067f841d2219add5da4aa16cb72cc1d831ca","first_seen":"2025-05-02T12:30:38.005551Z","last_seen":"2026-02-13T05:23:55.400556Z","times_seen":23,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w18-2fa0a4cd10ee656.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w18-2fa0a4cd10ee656.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 9840\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WlR2HisXYsC5HSXU4tUQRIuXljl4CWjPrY%2FC5Hhzd%2BZurlcD5tnyTd49RSCEBsGvNHZ9aCu4iGPnKFiHQGRUzTIqlAp2fA2E%2BtTUGWvY0B8%3D\"}]}\r\ncf-ray: 9c0b17500b2f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9840,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"5475061fc874d764a62bb2b291aac7aa","sha1":"177c93347c047552374637fa18ff59551851d016","sha256":"6d35253a7904f19903a43d13896fa8a31eb634b03f664a247cd8870d26de5853","sha512":"ca5c489590aefc9071470d780539301f40067ed4f3ee7eed80b70ad51092b3d8de9bd1ce0145d03de029e0443b67d551ef728761066f963150a300f1c7d0b7dd","ssdeep":"192:BHf/pKVAIuSUuRvXnE5Zn2PTQdw9Ghpu6666mvY:5sAARvnE5Z2PTQHu6666mA","tlshash":"e0129d8f434270cbf9246f078a6369786d61d2de0c9f93870a90794608f8cf6ab4b857","first_seen":"2025-05-02T12:30:38.01231Z","last_seen":"2026-02-13T05:23:55.485086Z","times_seen":23,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201608\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-31T15:29:21.374515Z","times_seen":858581,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":99,"dns":1,"connect":8,"send":0,"wait":8,"receive":9,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/coins/ETH.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/coins/ETH.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 1100\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F07VneWcXuoROb6d23xe9W1cX7HuwqaKpp9o6K8g%2FylN3OGKV2asDUxXIQjOCzBk2tf8XG4UpjNtmmPI15J3hmZ3KnWoS1rZhdqj3Woubz0%3D\"}]}\r\ncf-ray: 9c0b174fdb0f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-05-28T00:26:39.830145Z","times_seen":1634,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/t3@2x-7eb1746813cebb3.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/t3@2x-7eb1746813cebb3.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 26495\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdldvV%2FFQt7ka3153xDIetsJgDYY7b2s8SJFMjwpNm%2F%2BNtypdjF6AY14kAK1cHLDX4PJMMg0wJC8trIFQwNcFnI%2Fy8qYLPVgwpRjvAWRjKM%3D\"}]}\r\ncf-ray: 9c0b174feb18783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26495,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 500 x 501, 8-bit colormap, non-interlaced","md5":"e4b31df178cf4bec90372f6bde7c572a","sha1":"4fab00073fdfb2db45db46abc6cc7fa00c208401","sha256":"d547036a245291775b8b1dd654c32942ec2d7d5b94919c91c186c5f1418fda89","sha512":"244ab4ef462291d2809872792f6b88b4a2352d5dfaf0f43c434f0c9a0be3d9df995fb952789bbc5901ae1b3ab1bea73bb78694d32687d7da24650d595204e120","ssdeep":"384:+S3uNLGnkwf+EQ7r9r9idiVWGkLKCMxvwm06BL3VZI3wuKrFF+bq8:+SHkj7kGkBMxvwmLVCAprFF+bf","tlshash":"03c2e1e28008b215cf6a0b7fadc7e6fecee80e2765a50581d943c494b544fa585e8d92","first_seen":"2025-06-30T15:48:55.398264Z","last_seen":"2026-02-13T05:23:55.389963Z","times_seen":22,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w5-ca5af8d7af4985f.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w5-ca5af8d7af4985f.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 8753\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IihaSCP7W2V25v2imWOlfZ9qfx%2BLEnEWAu4iPD0YMxgrNp5%2BY9vJUG7LqaPTHbQngoTJs8GWy2Q3EJZuT%2B%2B4PLMB8mD%2Fs3xoPQm8PjOT%2Bs%3D\"}]}\r\ncf-ray: 9c0b174feb21783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8753,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"22bb04870bb2d41b90297c84b202dba4","sha1":"7e1c56c7964afc66709fea19239ebc45d3ec99c9","sha256":"3c889b71c50041536d4f5bdc48a15c7ec3ff69ca8be64ce713840c201d3ceff1","sha512":"32f74a9d2663591c2463dd3bc766ee8451942abd4f2bdd888c8d49190994caf9a6b51e7af369c93f518ef6e7c1ee6b28ca5dee9588425b1a9d022a1dda17a0eb","ssdeep":"192:YvSjqkedrSWPyygQSk0WU8GDuZL+ezEYNSNmAIZMobpH:YvSjqVdrS6S78GSZCqEYomAIZpH","tlshash":"bf027d17f6f95927c9870b5596fcb8a3e21b1205f89746858a565c821fc7f883bc33b0","first_seen":"2025-05-02T12:30:38.022298Z","last_seen":"2026-02-13T05:23:55.386229Z","times_seen":23,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w12-92d9bf4b054fadb.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w12-92d9bf4b054fadb.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 7129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FpTM8oebV7c6WuF0Y7tpnEZyIfNPuv9To2BcwlDcbg8U8mlUExDlMwF5CIbexJa9%2BXFGo9jPxo9noqtDT4mCzACx01k6qhZuHHesXPZNt4%3D\"}]}\r\ncf-ray: 9c0b174ffb28783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"251df3c7255eeadcec59e17ab6282ddb","sha1":"b6321c240aa40883328c0342a31bcae4c3b9b5c4","sha256":"0598adb3b9e75423ec1fb1e889d307446d42b6c57c7bc07087a71573ca383b95","sha512":"f5dea765f8dad824a7bdb9264a8fc93bfb7a4537394312190dcaff4a6a017a1b234820b875b8250db48470aa37cac56bee92eaf49c7acec4ab7e186658fe48b5","ssdeep":"96:lr+tbVVVVVlHMsAWgNVDV1d6B5nkO8DkSoIKQwc4Os6zqgvNc8T6YyY68BcpWpqE:No7HM5WgNV0QnoImXAyOTQ8NeYYM","tlshash":"d3e19ea6bb72b8f1f73a8e2ac01662cb65532340f9767d4e4cb65b06ef68145c0987c0","first_seen":"2025-05-02T12:30:37.951633Z","last_seen":"2026-02-13T05:23:55.466244Z","times_seen":23,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w15-e47de6304d850c8.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w15-e47de6304d850c8.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 6882\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enWerOdkX%2FSlqBkAZ8k9A2yN0KQUmwk7tpnTSwbDW1%2BHGQzJQSJyG8mxoh0tF2kdbX%2FQmAMArmyH2AHJT0%2F46eucZAzfZCn93S2FsxXhU9I%3D\"}]}\r\ncf-ray: 9c0b17500b2c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6882,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"43e1d074b3822e880f2341fa2878eab3","sha1":"ce366650cbe5645e08c500f132f3092e88e08753","sha256":"97822eed76016bbecaf0032c2db35504e508f39caafc774365bb1c27d6ce6a59","sha512":"d6e38b741f23e5773e9d47121eebe8b93fa120fb0c23b17a8ebe0cc5ce92e7437dd3aedc162f98c322d02c92d11cf47c336aba40fabb8cdc2b66f5c84c6424e6","ssdeep":"96:ZiPSkBMaofqkUU++ZjM7btEw2pWj364APA6aM+7D7qbk/llhtquueNNXT0yimIp8:CRU++ZgRj3y5bkttBNNXTpDktui2P","tlshash":"4ce19e3170046cfa9b0bfe7f346a82d138153a44154292feaf8e9b5b265895b59cf803","first_seen":"2025-05-02T12:30:37.952994Z","last_seen":"2026-02-13T05:23:55.474974Z","times_seen":23,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w30-898ab3a8f554f63.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w30-898ab3a8f554f63.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 8573\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzDO7Dw0Yrp%2BX2PK3%2FpWeO4j0dGjjkN0wQCLuXaLiSg8EbWYekb0h%2BhlIj5oqaC02MOs%2BUKEli7mBqCHNpqRNXbKmQdYqqzivdb3k4Tee0o%3D\"}]}\r\ncf-ray: 9c0b17502b3b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8573,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"2bb9a4e7761d049b595849c269c6ef3d","sha1":"a68ef3ddb3b39942381af3c6e1ba3ac10c532965","sha256":"8fa1035378de78cc9e728c8d1d0a22688b2e770be2ab6bd3cf329a50a9864e42","sha512":"895badeed7c23def394bab34f672176d96227395c6f843af83cdf9373f02af427c0af516ceb98069126b3c26487b5375518d3f172e4100eb20dd01d559b7c674","ssdeep":"192:sLoPJIzzzz6bQ6kkyY6IC/yH6nYCoPVJaToajM5QnZZ4Jxmav:sIcW67aH6YCoPVQrjHnT4ac","tlshash":"60028ed542e5e3b06fcbce7887f396d3521e754f7e8b0869ef4ac1300438522c46a998","first_seen":"2025-05-02T12:30:37.970052Z","last_seen":"2026-02-13T05:23:55.456796Z","times_seen":23,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/fonts/inter/Inter-Regular.ttf","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.ttf HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/assets/css/root.css?v=4\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: font/ttf;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHu78P0efTjkQOGp1Kb58Exnt%2Bja%2FaBfmWbrKZuU3t9ilCQayL1IBFUEhnUx8IKYQzfMNfSFHXYC26wc2lnimjpl0yj9ZzDYaioN1pmNN4g%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17559b87783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-05-30T22:40:26.219946Z","times_seen":3933,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201608\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-31T15:29:21.374515Z","times_seen":858581,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":183,"dns":1,"connect":9,"send":0,"wait":10,"receive":3,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/css/style.css","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/css/style.css HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FL1eFxXZiwlN9WDB0MlivRyhFxA9w5kcK8mNdOhMrysdFJpoFLTpS%2F53GgvHxyfGRzOW5NzuVNkKW4ddkoLW7cMm5yb5kqppLGqJmQZPoDQ%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fbafe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67401,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (414), with CRLF line terminators","md5":"060cee7d2ca798ba7549f01cd327b453","sha1":"3939d4f9da777c978ebb923361ea38617fc0931b","sha256":"c87e7b40816b2b51ebaa807175530db8131cb0fe8766d77443adc22ed325c2c9","sha512":"a5e8af0074a2253c1d14b7360b8486a4b9b6113dd3445b4bd3ea5d5bb32219b4a518dd8fe762be578eb7699c06e46a8dd51dcb7781de1b450d4fca572ac72487","ssdeep":"768:NJxZqa5P8J+PwesPJUYESW49U/CLc8eQQE7MUuVJptUbkIzArjSYcsiuF:n5P/SvE8keuF","tlshash":"fb630c10ba9b7817497faa3eb7b44e2e3e4d6723c9130369b1d51b0c81d5db970321ae","first_seen":"2025-06-30T15:48:55.447177Z","last_seen":"2026-02-13T05:23:55.472693Z","times_seen":18,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/header/card2.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/header/card2.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 4528\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vmv%2FJaKB85tuGNBsD2%2FpJtAIoQzrXaub%2Fl3ppSMDs69BwwWEIRZ%2B0GBcLfQvjl6PjrTyvCgzyHK%2FuqJw%2F9oVPGiAIVRy%2FftZS4zh9IJLOBc%3D\"}]}\r\ncf-ray: 9c0b174fcb09783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"787d17f49cc145d078cec3f38989b144","sha1":"8bb854fe7462d3ddc152b958232a952888a14c3f","sha256":"c38f9a1f91724365b80b233a5ddc5b891216bf82bb05f7be521fc2e75bd3cf37","sha512":"8ab4bb5374d3d7133892ba81959d0a0cf9c3adc05328d644b2ef326e602907c6988dd9b1588cb18e595583458628e130943ed8b53d70d13dde7c03fcde4f6ed1","ssdeep":"48:+MvnJralQqxKPbGf3k0IJN5IloAhat2wxrYCrW3ETb92jw1M:ZvnJWlHAjck0IJ7Ifat2wpYkbb92jwm","tlshash":"7891cc06da5235c1664ea9b711d503596c334153cdc19c5cb4cd8829af303e91e6ebdf","first_seen":"2025-02-15T17:58:10.483843Z","last_seen":"2026-05-25T10:16:26.600767Z","times_seen":382,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/css/chart.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/css/chart.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/assets/landings/3/css/main.css\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqCeguBdrtgx%2F67JO%2FYPsznYbY9UocxjE%2FzK3yhWqhw8aK2VvrW71Qa1%2B5G1tQ2gGeD1IGxQazLPlhhhC0%2BLAu4%2B6GzZhGAXNjMF3Atjziw%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17557b85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11274,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"128b4940aaf5f8fdf8b1cac43b31941f","sha1":"d316ec4805095f38fadbdd72b8b9f59220a9fb23","sha256":"ecb93068f4c4dc2cf04b4ac48e2724016429878a18dc0edb4ac34e0a70982a2f","sha512":"8d3dd655e204edffaa37a304bbec447b40b344946d55227644b1e78349256d5004e46b916ee46b2036db4d2433a48e1b9775c60dc706972eb9fe3077cdba645a","ssdeep":"96:I46ZyRSIGk622hEx0OJ7TLaLCv3bZiPn8kCCgr:VKXzG","tlshash":"a432f891ba645078cb017a9787c91dce101ee4c392e20cdaff50257f25385deaeed26e","first_seen":"2025-06-25T10:39:15.17973Z","last_seen":"2026-03-22T14:44:26.334525Z","times_seen":53,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id= HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nexpires: Tue, 20 Jan 2026 02:20:10 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 20 Jan 2026 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75094\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202756,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3630)","md5":"a6678892a7dc9cdbc182786bfcf09010","sha1":"9bced9c302e65a355752d7cbd521cf65417e0669","sha256":"b0832726babd55a083fa8310bae622a73eb4ecb4b1a290a7d568c6ae897229df","sha512":"74d84a477ae3e6a982d558645ec7cb1d17418db5308691bc6bc30f47ed0f6dc98bfcf08dfc5d4d81d70dcba58ee2669bafdc176b2b43990ccea00f4dbfd29abd","ssdeep":"6144:YMqdZ37uy3tpWct1OkxFzqPSmH4LpygQi:7QVuydNqPSmH4LpygQi","tlshash":"081429c9b7ca7062539365b8503f014bb17a7d92f84cd8d0e082d9d82e74aaa1277f7d","first_seen":"2026-01-19T08:31:57.052506Z","last_seen":"2026-01-20T07:10:40.067082Z","times_seen":19,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":147,"dns":4,"connect":20,"send":0,"wait":33,"receive":36,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 63d17bce-9dad-4bb6-aaa0-1b628bca5c10\r\nx-mbx-used-weight: 8\r\nx-mbx-used-weight-1m: 8\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: kDrRgDwW_ktsZzkpQqCa3vGtBNWiTQHeFIaW4A6XWFgV5124-JEWvQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1364\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 7f81737c-64b8-4212-afe1-14dc286e48ec\r\nx-mbx-used-weight: 10\r\nx-mbx-used-weight-1m: 10\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: NM8H8YSysnDZ01xT_zVTRojObPz2ftgtI62EadHprnjuBIyq19HZcQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4249,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"60daeefaa4611715eb66c67f7d8b8b14","sha1":"62d6bd9421007312052a9b4c9437d065dfc28c98","sha256":"7a7c14c1817f08661a8d0ddbf6a585af516b4abd68914d14ea4a20f55571b1bf","sha512":"a743a7c812caf7a99c207296870d504d0f5e4e117cbfff460efadccefd0cc812a9707a3fa9993aba916a609d9b50a9d2efb9ef51f150304b85b4e82a9829bb8a","ssdeep":"96:juML9sjvv/CknHg2miP1jxFVmN0FPthoqroOfkloPOxvvKFsaQHCfmT4w:z0vCNxi9jxuNyGtBa2Co4w","tlshash":"1c9167521baa4373fb368c493391b9751e2e7067fdce4ec0daf126b718e21b25649350","first_seen":"2026-01-20T02:20:37.6195Z","last_seen":"2026-01-20T02:20:37.6195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 69e33d08-6cce-4b59-9523-32ab7afa8919\r\nx-mbx-used-weight: 24\r\nx-mbx-used-weight-1m: 24\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: OofY0LLVbZTC5SIb5qmm7zRXz0MCdrVYKz8eadBteloOZiJas5WL9Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w16-241516b1eb8b97d.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w16-241516b1eb8b97d.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 3795\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBG4mL5RxekZ1x6kPqqNicwLCcxj8%2FZ8p32lfXXHYhf4Cz8hTZPa63n4Jz8YoiSJbI%2FbfuMJVLDJgLAK3LakBp0yMXKXZjjMtVYC6vXkL6Y%3D\"}]}\r\ncf-ray: 9c0b17500b2e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3795,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 144, 8-bit/color RGBA, non-interlaced","md5":"2e7d4dd08bc40229328cedeec6a7a285","sha1":"60a6f4a7b64d4e7ed0869d3fd8f6be8f8a20e2dc","sha256":"d14d8bd38d11ef43f9d6d7c37ad016401076e0546ca57c1b7172e571e60d255c","sha512":"b61baea9ed802c8809c467c723f1b49689c3c11e2278d28ad9c77e09b4692a1d70a8992e5bf21ec8fa826ab0fdba477a3cfbb8c45efdb43fd44979ba5ddb540a","ssdeep":"","tlshash":"1d71e7c96b7178ed91bd1098736ca7d02aa326b1441141b4ed0ff1a3004f862c78ef9e","first_seen":"2025-05-02T12:30:38.006829Z","last_seen":"2026-02-13T05:23:55.491766Z","times_seen":20,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w20-478a2d0ae04eada.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w20-478a2d0ae04eada.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 8635\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tp92m7IuS7DWGMLnxbsvqncLtJsFb0cOHYe88DJlxJk65w%2BPeGXa3dFiUbF9GCXjFcdoQkP5owRTMVb8dS3JuheQTJAUdCWHCWlrXFRg7rY%3D\"}]}\r\ncf-ray: 9c0b17500b30783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8635,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"842f005f3de81f0140dfa46e29a5ba62","sha1":"81946576f988355557178230c87f4f7ba9f10266","sha256":"313a65f65ccd9d9cf5d3f24aaabfa605f23b635f0930ffdb9d5dcdc76b2f8722","sha512":"63fbe462d6dbdfae89189e086c63f041662b124fb22af7f6c571b7744e06e20981c42501998b0441e2162c21e8f3d970fbb9f94ad112713a2bc9e8edc9d91172","ssdeep":"192:Kcssi/ZicHZYLTpMcLPuvK9BIefp/B8YjOc0QTkxee083:dssi/EEYL281p1OZekxee083","tlshash":"26027df700a4c4cb5426703a79ae5aabd36f55f8459818b30d1e8e5c6385ed4762f0cd","first_seen":"2025-05-02T12:30:37.937516Z","last_seen":"2026-02-13T05:23:55.444008Z","times_seen":23,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w31-19d64296bad71e6.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w31-19d64296bad71e6.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 6790\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0pnjuUrsLCGLI4d1Ys7vaNMAznXc5NecRoSU45Dt8Mh0YhmWgsI%2B99Kkm4QrlDq71XUPepmsJHcsH02%2BdOVtRCbGLIOF8pngMQW1OS%2F%2F2I%3D\"}]}\r\ncf-ray: 9c0b17502b3c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6790,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"437c2ab8253d37c364e25628cf66e43c","sha1":"bbbbdf449b072aafed60b7c391624ad190ffae9c","sha256":"1e0388434235f868abe2e8eddc1653c98a4f6fa83d02668381837609521220f2","sha512":"e2073f4b701ff24e8986fa159c3acb37aec3c93d717f124dc6e19760afa5cb726ce27bbdff44a3c15dbe04ac0ed378e25253b1d2ebe6c481ec0beaf6a6d5c0a9","ssdeep":"192:8roroEsFtM09zd7XuC5ulSvIyOXpswgggggvU:8roroEAtM0td7XuENY7gggggc","tlshash":"91e16b665fc977930440b327a57c223920b67f2cd8408cc7a830c04de9a59a6ea1c5ef","first_seen":"2025-05-02T12:30:38.019361Z","last_seen":"2026-02-13T05:23:55.431569Z","times_seen":23,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1239\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 56625af5-43c4-4631-97e4-ae352f517a15\r\nx-mbx-used-weight: 18\r\nx-mbx-used-weight-1m: 18\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 5VEhYUx5pMYCc7wIkASRPeXaDyCBTPGhTtb2kllViL6Fv0-VHJPmTQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4135,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3e998e19688b081e2ab65b310763c13a","sha1":"674e009aa30827e02b23e42719d830c0503866c2","sha256":"248a1a38c0aa5bb6dffebc85826fd9fa1fa41a6b6cd2628a8fc00fbd9b7a5dd9","sha512":"bad4daacedf198f9e8ab8be7b86a6c4a16c037428d7b9e99c7fb2a4e6e8541eacb04c5bf1588da874ebc073321dcc0376723a0e0cc2613e7277888a312e067a0","ssdeep":"96:iky7AJnW+WgHlf8Ltoncydc8rxVSPQi6mYs3VHbO15UR52Z4asJIPkV:kSihyT/g6tPK","tlshash":"9681d6151b4b837cfaf68c093396f86109db764faeda5cd089912ea324f24b24f1875d","first_seen":"2026-01-20T02:20:37.623471Z","last_seen":"2026-01-20T02:20:37.623471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 4c4ae849-589f-422a-beeb-410ebc2f11af\r\nx-mbx-used-weight: 22\r\nx-mbx-used-weight-1m: 22\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: ObzEXMnglymLvAGQqe9hKXAvYx4Mo_6QI556h7sIYlk3saUGr9_dKA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/header/market-screener.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/header/market-screener.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XYprEl5KKuPYbTYKmce8LXjaCqk2N9lZp8LCpqaU62dpVRGKFzuzUyKrBqB3hkmPWAq8uyByMppqtMzRlVMMr6gDP4jRR4BK6TUmbWJjQhE%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fcb04783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4bc1b9af0dc3f4faa84f9296a1cd6f55","sha1":"19478f202a83336d5182ea98e36ceed7b44803e6","sha256":"47b6987b48b908d52d3483d0ce8dc4b0476d4d9840906830d150467aee1e4b3e","sha512":"4a7212cee040e5c766daf774d117fce6d5c0b001656123cbd08b57c75af24031fe84ab99beb868e1552135da8ea034d0ccd144ff86496a8afc97c307b42c0ace","ssdeep":"","tlshash":"7831ffc890d6c9f9aa64c70013f99f95386238fb3250099cfebc642337920a8309cfd6","first_seen":"2025-06-30T14:26:49.376998Z","last_seen":"2026-05-25T10:16:26.570707Z","times_seen":119,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w23-156efa9d12294c7.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w23-156efa9d12294c7.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 18956\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKJh%2BXdrr7TB%2FGxKNmK5NhH9uNTS7qiIEetSqPokzJnt%2Fbbs6ux3WXz1ccJoCxMIPW73EAItBm84amGkD6PUsSlA%2F1ZMVXDNYi3kY%2BchJAg%3D\"}]}\r\ncf-ray: 9c0b17500b34783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18956,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"6432c88c0179d24198a241eb660762ac","sha1":"ec93f2fe7fd61578f13451df940ba1fea6b07643","sha256":"9b5ff57d83a46bfdbffaf97a49cb6b5ae3fb1870a92c9f3c515fbbec1cd83852","sha512":"a66c8c101b65697e813b13b91b775c72583b344d767698438a97fda5e1987f999c8f60a6ae94bb12cf3263a5d1195d79479962dcbcb1d96d38e4a6dd1c967346","ssdeep":"384:Co0oSscpCQha+9tcL5Dr76zgmeQ/MhDzxHCl6y:Co0oSscw9dr76znD6/N26y","tlshash":"6482d09129152668cf9af03f5f23f44d1a520831d963aca3ea5b08ef10cf5176ab358b","first_seen":"2025-05-02T12:30:37.99579Z","last_seen":"2026-02-13T05:23:55.415023Z","times_seen":23,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/js/toastr.js","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BcCWqmyrTlQSaaSeK3niE7uMGM8bALEGzHl%2B8uHHzaw50tnZF0wLQn0K5pDdH0tBnLRfIszMPTDrQeuaBZQ7yCtAlpwyjRMtWE6WSx4K4Q%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17504b4c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-05-30T22:56:16.235006Z","times_seen":912,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:06 GMT","end":"Tue, 03 Mar 2026 17:10:05 GMT"},"fingerprint":{"sha1":"87:0F:C1:25:08:22:50:0D:D6:14:D4:EF:A9:CF:49:70:C2:8E:5D:36","sha256":"65:A3:E5:AA:4F:13:A5:53:EC:B5:39:DF:03:7F:DE:7D:6F:2B:23:33:85:34:59:13:C3:FC:C2:AC:22:E9:97:D9"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:20:02 GMT\r\nexpires: Sun, 17 Jan 2027 18:20:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201608\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-31T15:29:21.374515Z","times_seen":858581,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":189,"dns":1,"connect":10,"send":0,"wait":8,"receive":4,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w7-1a9b66b9d19a09c.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w7-1a9b66b9d19a09c.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 9233\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVTx43h05OZ1uduEkhdd2NZWJ9ggpANCI48UeJwvoo%2FoOugLTmhowAg4Zg6SGdA01crqjjKO2YZwD42Rt4fRYeixTBXBN%2Fc1lXzQHLhfxh0%3D\"}]}\r\ncf-ray: 9c0b174feb22783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9233,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"0e11bf2590016e02ecca8f7a86dce145","sha1":"18b77ce867fae67f9a6e02f8f401e3784afdad71","sha256":"7cd0aca8966efd95ed70bab5744d19311136a45ff74ebb907d241bec500815bf","sha512":"2962fd27b780605bbd5c8d8b27a2d985a1624e23e85b32631c4deaf2272e8e4a01ee26d8f3a01ec3be72c8b277daf7318a1be1b7c9322a5abcac70996f626919","ssdeep":"192:DPYLPZ1t1+OW45v3k3PID+oXXtGZ7SZoB2O6MI35t4zaszvP8YFk:DPYL6al03PIjnticRO6MI35tEaSLC","tlshash":"1812a08766a0cac3cce7e90f323bc7156432436157432379ad5cd5cd68c6ea2d98a946","first_seen":"2025-05-02T12:30:37.936093Z","last_seen":"2026-02-13T05:23:55.467404Z","times_seen":23,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w38-38165ff98f97dbf.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w38-38165ff98f97dbf.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 4454\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBigKsmfXs1Q1UL11gHjYKbPGvb5NGQyLMpbcjXy5mQ8XN3B8XJ0B12WaVVq1WryKX2dfkI8UqJA%2BJHVxB0l8vxmKOZ19%2Bd1j9uqlBsU%2Fps%3D\"}]}\r\ncf-ray: 9c0b17503b44783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4454,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit colormap, non-interlaced","md5":"c4d1c69a157e61dfbf51d617585c7523","sha1":"d3092340b45846b0dc6be6b2d57322e8607b8c30","sha256":"ca26917f98142e98d05cb3d553187d020da634101e3e718bca71dafcb5dbdcca","sha512":"0316b0384c3ae9f619094441e1347ed7d5d3561ff3029eab87e18d2cf3b7bea0dd561c0ad5ee02fb9e8ade6ea0e310ec68a69bbeb60abcacb027151c739f11b1","ssdeep":"96:i2KTaATFz1ckImZTmUzjlNoS31N7IEd22PUfeUV8MkHAHd/eJgCpXcThTJjFK:i2KWARz2kImZVOSvfUfeUaHG7CpXcFt4","tlshash":"c4915dc3ac239d33e6999c350054c7d0a91abf0075562ccb71239938f17593b9ae8afe","first_seen":"2025-05-02T12:30:37.942544Z","last_seen":"2026-02-13T05:23:55.426502Z","times_seen":23,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w9-4b5039bb4859cb3.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w9-4b5039bb4859cb3.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 6538\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6tDJ%2BK86hBuKP3SygqGEfxvFdZJcoRUbn7ASBu3Ul%2BCA07Et%2FeLTo3ULwni2vGb9Qqy20Rs85iNRgQFoyB2Z56eHlZePqi6hAOVXmT%2BoXc%3D\"}]}\r\ncf-ray: 9c0b174ffb25783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6538,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"5ea2b9c7531f2db63350332ce240b448","sha1":"f71e5de7fa9ca2b7bc123fcc778075b6eb9b2943","sha256":"ab0a2cdf20fc1a19709e6a6441af3ae76dec7a885cb823e82f3a6ac6444e8571","sha512":"a2207cbfa1bb6d754e190bfbc98d6cdaf24d8b983f7d716c9319d22df6e1d5027bfa01aa6a5536ce3a8490a0c111fcfd271234523ba5867b9ef0f56c1d0499ac","ssdeep":"192:CdQ9f3OzWzWzWzWzIXH0YRcqKZ5ivhKj1ZeY9oyLJ4WuuuuUj686:CdQ9f36CCCC+HvtS1ZeY9oynuuuuF","tlshash":"bdd17dd65f830da59182afdc6633687d2ce440b8b2155ffb4e3a3e729a9d80d15c1398","first_seen":"2025-05-02T12:30:37.960768Z","last_seen":"2026-02-13T05:23:55.471332Z","times_seen":23,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w27-4e3bd03de7667dc.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w27-4e3bd03de7667dc.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 10428\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dltg5jUuzk%2Frp4vAjE%2FCzQZuWPByO04EBNpXcmhDS5S4Yj79qtTT0OxBCcjbTaiB3Cuh%2BHjweuJldm9jJ3iS2xt4%2Fgv3lA%2B2pDsfapnB5M%3D\"}]}\r\ncf-ray: 9c0b17502b39783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10428,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"53e270ee46f54c89ac97e0eb90b272f4","sha1":"6df9f93c52b6fa2390b30bf6477d6bbb3e0bb905","sha256":"5c9387dd4a1d4bac377d606f536d0e858d07de93140a90313b930c162776d7a4","sha512":"bf4df8ca786a4a3d2642eb9034ab2e328cbfee6376058d0387fc2776e7d707e95fddd0c4f7d5eaedd7913cbd82e55741a53439e6b7f1ec87b26cd7b7ed5c1475","ssdeep":"192:dkcYcwUwHxY2tFE/7bFJmgI6kPXV/lNzJ17p4FmLv7xuMQCtMROjePjrmkB:ecYcwUwHxY2tC/tJcV/ljvImLTxjtMRF","tlshash":"3e229ec6c4f09a15b1d819d439f10cf5db9ab7a98ea2d857f90fd54208339a1b6ea03c","first_seen":"2025-05-02T12:30:37.932964Z","last_seen":"2026-02-13T05:23:55.441845Z","times_seen":23,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/header/market-cap.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/header/market-cap.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uv25Nf%2BlMc7SVadmC7mcNNUkeD%2BZ7x%2BtkhL1lfCaQqoUD8eU41vkL3stSW4lktt95DPVMNNyKwSHfCKyS7SlBw6vyBZlmcLO6sSlDI%2F8ZZo%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fcb03783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7b2ff8e89bb97a7d20a382fc15f25538","sha1":"08daba877d46e4e88d9831380c5b0a5c6dd52bac","sha256":"61987960093cd56ae16730c31b394789b6c2c28059097a2a4c8d17748a408f22","sha512":"f4e0544203485593cc6d699798bbf81f6472da6b624ff037fd2549739589f5221b8298c9dedbd30dd10fc4667293d490e1cc1762f5b0e8485ec6643ef8abcc9f","ssdeep":"","tlshash":"f74152e80765473e5658eb015aba4f4974206092bf62018cf36e3d1bbbd2e9b248cd65","first_seen":"2025-06-30T14:26:49.370438Z","last_seen":"2026-05-25T10:16:26.592189Z","times_seen":119,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/main_logo.webp","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/main_logo.webp HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/webp;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 21310\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRPjK35mUix9Geso6Xx1IC0HKTS95rkF5lDlgd5nqmbCCEud2im0P2nErPtkQvKJvhl812QYH1dLPOdx46gJl7brhX3k0FLhVt99xJExIls%3D\"}]}\r\ncf-ray: 9c0b174fdb0b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21310,"size_decoded":0,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"5dbbe7930e1a25511b9184965a5b1d56","sha1":"b7c77eaa34bdc76ff575f689ea9aa41b48aad1ff","sha256":"e05dd024269cdbcda7b05114a256c946ad4112e2a23cc840a870b9f0b2495035","sha512":"eca8ad4b4ad4a424768adc5bbc38cb8f952cd482b25443de289583c5a10ad55319c54f5badb1bd89b3ecfb8cb2a233303e96a7d2b8c0956614cc8e13e900556e","ssdeep":"384:CIsO0l2yfAujsaBraQgp8ZRo0recf0r9kjn0LurNttXqQ//VFv2w9P+:CIsO0l2youjBraQpc0rBwin0qNttXHHG","tlshash":"dda2f28e229351f2cfee9b2c7056399fb55c4098c2394460f52e758c5aaee44a6df3f0","first_seen":"2025-06-30T15:48:55.390215Z","last_seen":"2026-02-13T05:23:55.481022Z","times_seen":19,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/coins/DOGE.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/coins/DOGE.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 2808\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHs7G0iQs8sj4zlwJJxPv246Mypvp6g1rvGge9QISJojTjNTPgrCRIWjpW1mecYkN8cU907qAQ8H%2Fiz9ntN%2BK1aBrSRDdCLY7WIQwj4zRSk%3D\"}]}\r\ncf-ray: 9c0b174fdb13783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-05-28T00:26:39.832864Z","times_seen":910,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/coins/TON.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/coins/TON.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 24181\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVWcxEsnGV5QXdT8aKL5aEpATzhfywCZ%2BF0DW9BpURIx1y42%2Fewgm%2Bg5hwjW3roDF2uH3Q99UpDO3xqte%2FRjSUGAXxC%2BQ79nTa3a4X2LyKI%3D\"}]}\r\ncf-ray: 9c0b174fdb14783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24181,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1e864e18e2e3a14b3407889b0e7fb1d4","sha1":"6498cdc01f17a9c51007bedb1eed9e28ef98bd90","sha256":"d8ffe78edcfb9ad030ef0f932ea5a25c89acab7c11d6cf03b32cd4913de14053","sha512":"5b0555db16debaafbad44fb6e10cd8f3ee414c8bd272ba47734fcdb44b32a5828cc0776c43dfea0c40c81d9718ebbee8d9f3fbfca17f08a5e45e193cb9497f31","ssdeep":"384:WU5AJju7MoJSV2L783TGNX2H3PLIE0eq8x343eNZCPkArJTMUno/JBWRCrasz5Px:/AA7MoUV2P83TGNGH3PLIE0t8+ONYP4F","tlshash":"40b2e128d57e8291b694f1b827cb5c8f0f738cd23c711e50ee550ea0a7922651cefa0e","first_seen":"2024-12-04T15:05:15.931067Z","last_seen":"2026-05-26T21:59:31.162282Z","times_seen":461,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Wed, 22 Jan 2025 08:49:06 GMT\r\netag: \"6790b102-4d\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: OG3x_H58Y1ZOW2I0zDRNhG1lW_IELEzYkdJ2R_yKJO_Cp1huHorVVw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"136f5552348d90a36b6c9a49046926c1","sha1":"b992325f95e0076c147ebf6593433f938b244f4e","sha256":"a60bafa499acbab1b73b92511707557400155adf5fd6a186cd56a2b822935ba7","sha512":"b790d85cf0597615435cf72e9384f8e640642a1cc3cc3564010a006eedbf5bcb956120cb81ebef9254d4675e785091a07d2cd79c66381fdc39b80ee5f4e48b8e","ssdeep":"","tlshash":"baa001f9a5a62009e92076c01cd532941c8983a030d24a102ac13969b55562ada06299","first_seen":"2023-12-04T13:46:15Z","last_seen":"2026-05-26T21:59:31.206987Z","times_seen":495,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":81,"dns":70,"connect":1,"send":0,"wait":235,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 4978bba7-be3d-40e6-b3e2-4bb777e86bf8\r\nx-mbx-used-weight: 6\r\nx-mbx-used-weight-1m: 6\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 3t279snyG6TJekRdK7MACBmhz6ADEUA9D1--Ht-4we6t3wWxN1CTpQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nage: 4108801\r\nx-served-by: cache-lga21978-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 41853\r\nx-timer: S1768875610.672360,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-31T15:28:49.206204Z","times_seen":163124,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":42,"dns":5,"connect":29,"send":0,"wait":30,"receive":8,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w17-9440f42cb3a6e31.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w17-9440f42cb3a6e31.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 13023\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nys41q7W0vlS2Ey3bcx%2Ftqvkst%2BQt3mNNmucYEvpFmucUv%2Bb3XRi9vN0nBJnUWQ8TkhiKxTpbLUzThXUy7DPsVbCugsArPSJ%2Bw7Bb0gMV6k%3D\"}]}\r\ncf-ray: 9c0b17500b2d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13023,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"b123858f470a43b6904d391033bc9472","sha1":"98bedb4a4f7291138d61ade9f06627e09fe931e1","sha256":"d45b1e0a032af76c4afd8641768caca46ad66e73e0e5a0d29a437e9fe8248f7f","sha512":"4f4665de22f646c0cb3bf9ee809a49d1fd565ac85e99c6274a866d18b41968d3fcb642d4293afd4e5d5c253d5cf29466899052cf829485556b62b4301d779d95","ssdeep":"192:gdqsgRxjoGcaRgPX09pGGelDWRDsC5q0Q08D29HVv/aLaxgWEY4tj4VcN3QxgZuA:6groveOX0KGaJ0Xv/a+NWtkVYSQOz09","tlshash":"f442cffc5019f165a1f350ac91fbc22036b48c3c7220ef14589269f21b1574a67e5bad","first_seen":"2025-05-02T12:30:37.975626Z","last_seen":"2026-02-13T05:23:55.40716Z","times_seen":23,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 39021c3d-7008-4f99-b74a-50aedb9b4725\r\nx-mbx-used-weight: 30\r\nx-mbx-used-weight-1m: 30\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 8C0UJPSuz9s0_avvhHITRoI8NLfEejCrQTGOAjI1IMyL9mBjK99o5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/t4@2x-92cf56aa72ad37c.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/t4@2x-92cf56aa72ad37c.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 25503\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E4K8tzVqIpLMncap37ZvV0FrfwiWunH%2BeNUtGBjLD7JBhtC33mHE5yoyEHTaU01%2BDmq1WlYDHdZHF7glOop5I%2Bafrlw93AdDGja45fzFEGs%3D\"}]}\r\ncf-ray: 9c0b174feb19783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25503,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"45c13e884303051fbb96bed5ab09df6c","sha1":"981b63991c080649c59424b5fcb32f5a7cd0f4b5","sha256":"4fdf9574c90d8c33ea6a0ab540ac2080823f7a8df351cbf8adb73819eb0200e0","sha512":"5d9ced89f41227c834ac49dd429df57a6dc2edde43ec982ce5f506f8a7b8dc845a764b3b7d004009a0d332fd60f52ccb4a1b88a8b39b71dd7bda567f263cb159","ssdeep":"768:rsEMUKZLqbxgftuxNHzhjDopmggyf6YDeYt:rsEMUKZL2gftsNhDoXgIb/t","tlshash":"c3b2f1d34248d4ab8af925aef931c04ce88c177405544eeb5a2ca0f635eb4ea570d779","first_seen":"2025-06-30T15:48:55.440726Z","last_seen":"2026-02-13T05:23:55.385131Z","times_seen":22,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w4-ec6400cd8a51750.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w4-ec6400cd8a51750.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 7047\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndHi6k3TNGymG1ZDCfe3Zs4wY%2BL9ps90SinmnBZF%2FEbcf3FVfyt5wcR0CEfEJIQJbdP9a3Rx1vYu%2BDr%2BdNtjvn5tXWUJl2x1%2BQ7oF4CCcHI%3D\"}]}\r\ncf-ray: 9c0b174feb20783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7047,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"3a612730ad4a7d10a58649f1861d7a45","sha1":"12f84f259cce7663f33b2c0b19b0ba99bd476427","sha256":"53fbe20bb80e7de450046ed48ede1121c779ddcf7cb05609de992347cf135623","sha512":"d1881ad8eee1b2b161a73c9982283cc7bdfbca9728dd3938106c468d227a939eff3c7f64c670fbc03a52f5fd4770c5e6281431d50174639772cd4c8ecf2fcce2","ssdeep":"192:6i4M4RtqHHjEcy26SEjqe60DSW72VqK/P440/YqO1ea6znOPrxrC+aaUB:6zRtqHHwcylSEjqe620VqW44ZHVKiF38","tlshash":"4be18c43532b9bebc51dde17031b8b7c1033652cd70baf4448e26d1f9c9a48897165de","first_seen":"2025-05-02T12:30:37.974531Z","last_seen":"2026-02-13T05:23:55.488186Z","times_seen":23,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w14-3249f9edb6cda10.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w14-3249f9edb6cda10.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 13170\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIb8vBT9PPJOWnVByboXE9IfAAQqwIh0gCznWJMxMiM7FPj%2B%2BKqh4wF3E0SsVosNH8xIMDqT3jT7gaWAJieZFhvs9kLlvsvupP6ilfN%2B9BY%3D\"}]}\r\ncf-ray: 9c0b174ffb2b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13170,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"645ffd6b23554abe6708588556e875d2","sha1":"e80990e492fedf547bcb7968d5224520aeb4e175","sha256":"3b1a9748fea3ba1bd4a7cfb1aca0fb77c94d242b2becbc39f4efa491dd01ef5f","sha512":"16f79d95b9955f3c7799931dedf057279dfbc78ee9868f5a2bba8c50ca7c7068317e35539b3a47b58d05d0833decc9912d43004ec2bf75a5b12c9ec61b27e3b6","ssdeep":"384:GecOxgD+pmEOjIgftsw0cI1UPuFQbitEUATATATzKE:dcgpmxjUcjGFQb5UKKKzL","tlshash":"5a42bed1944ad0364ebb5da807c20e4abc383f780782ff56e605aec62d4641a4ed1e43","first_seen":"2025-05-02T12:30:37.993441Z","last_seen":"2026-02-13T05:23:55.513399Z","times_seen":23,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/arrow-down.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/arrow-down.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMWxmWeo17ua8KBJJQR%2BIAB9N1a4ldI%2FqtEZ8zSqNGaNvNn0Mzn5vGOINP%2B4qax6%2BVUqMdi7Vms7XBeggIqB2fSjwn%2ByV%2FvQsO1v43Kwp%2B0%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17504b4b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d0be16ce06ea0a66b8c8be201c88f71a","sha1":"03afb7918db67625b2365659d303a057071773eb","sha256":"3e6f14737272b9e9e4b60048aea76d784d99ed190878112b91f2cfba0c6fc77c","sha512":"c26291f4c90c6fe57adfcd466577789d483352812391a587011e19e0e8bf111230722309775ae62ef605ce3ef8bc7efe533b18eef7fbfea696f60205f169c245","ssdeep":"","tlshash":"19d0a79841d84d2ce6664650d7783664f03e10735f894188ea52713ed51a6cd6c339ec","first_seen":"2024-12-06T22:27:57.083257Z","last_seen":"2026-05-25T10:16:26.591524Z","times_seen":425,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/js/noti.js?v=3","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/js/noti.js?v=3 HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wk8iUSVS4NzPqxuQObc93WrKML90RQFkD%2BDckVi3cQPbXDanNM%2B8nYvutVatlgfarc94eO0MZdDqckYsdS6BSlzslkCdVgUDDIh5nnF%2FbzA%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17504b4e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12111,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (344), with CRLF line terminators","md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-05-25T10:16:26.578703Z","times_seen":275,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/domain_icons/16_1768491294245.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /domain_icons/16_1768491294245.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Thu, 15 Jan 2026 15:34:54 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dY8zdcBMcJrOszag8jfwsXG1OZ5KbwD2LxRCTTmjjNfdXF2yl5V2PHLXtjBQRf6SwPZDD6%2FUitQgNxAXXmAjW2sMF7oYScsADqVw4jK2SQ%3D\"}]}\r\nserver: cloudflare\r\nage: 1\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c0b17581ba1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"fe67192773a868e8fc963a9d7336bdf4","sha1":"88eb8268d1099dad20d55018df69e93e898f2d7f","sha256":"d4e91e2ce107eb477af74af4287f81141ab575facb264740f418349b1e24268a","sha512":"4300eeb4c1c09cf9264121a7e3f62ef5690f8bbd945173e9b0a9a386c7f4959018cb21ecd0b0abc39565c37812b80e3d5741b9a816d598bf253de29b6c0ea536","ssdeep":"","tlshash":"f6210014eaab1370ecc747248835d9f43b5ba09d6702b77cc076a320711ead9ca80dee","first_seen":"2026-01-20T02:20:37.59565Z","last_seen":"2026-01-20T02:24:22.379793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 42396\r\ncf-ray: 9c0b17500b7956bf-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"658b77e4-a59c\"\r\nlast-modified: Wed, 27 Dec 2023 01:03:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 333278\r\nexpires: Sun, 10 Jan 2027 02:20:09 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BrUK6%2FvKLjh0HgogdbrYa8j9ePFUoawB1LMC3zTeaIJqK6aEHs4HqVrRWI2lPfQp1qkH7PRF%2FDbEVKqA85v9%2BSHhfrEujI8X65UwVqCbo3BQewuTi2abP3x3X7bxwBeZmpTI5Swp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346626,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c83c4bce691e18f82409f87b2bf84e4","sha1":"3958d951f073022975e50de0c711a17bfa1b703f","sha256":"03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962","sha512":"fe4eb9f06e94b02bdb906441def3d7a6c3c781679db89c225863c2192d78210c37c69afadc010c740f273181b68266245e2b50c434e7ea288aff67c3e13f3ba8","ssdeep":"3072:LRA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:LRAI64wN89BqZnODweSgH3n/hIB","tlshash":"b5742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2023-12-27T17:19:29Z","last_seen":"2026-05-31T13:08:06.677099Z","times_seen":5694,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":10,"receive":2,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w26-8b09bc3a300863a.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w26-8b09bc3a300863a.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 12461\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JBRsVHNRMS60xYGWm32zWkvN5nNH1hUaKBBn%2BLWkYSK32qi4OqNV7Ttrdqi46IfEraF9SRthQR%2Fg9akEMZQZXCWxI515msEj3JmNEA%2B9%2B4%3D\"}]}\r\ncf-ray: 9c0b17501b37783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12461,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"7d68fe15d964bcb22bffd558c0681945","sha1":"29d3621dbae3da1e8cf1b281b2f508c0c7a1e03c","sha256":"6f9f9aaa425020761a49621fcf6123b63c7d4ff5e0a838be40117f3291fa38fd","sha512":"69c8629e3d82365ec587ac0f0f3a89f283644fee527b4bdbe087794460ffe11d4d10c78a871a4569113c89adb17e7f1c9f85ff5062acc337399c56ca41c869de","ssdeep":"192:prjvc86NymWJOx5ECvgrAAo43RvlDTvLdykNjYUI7UVZzDtaI6Mj:prjvVXmWM83HHdyCkUqqDt9Pj","tlshash":"0342afe8fc39d0650d1d5292c3e358fb356599ba921b7e2709844fd0d272d24bf07d86","first_seen":"2025-05-02T12:30:38.00811Z","last_seen":"2026-02-13T05:23:55.449327Z","times_seen":23,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/support-logo-chat.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/support-logo-chat.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZJMMSk3rrcDgRaHpQdHeo2C3Y96qRSh1%2B%2Fg7s4F%2BvExoIv%2B1KUSQwtYJJvrY6%2FxZ7JWN%2B%2FhqdLiTX0KiHYg1vFn2acfq5%2BNX4A4BCEQPYE%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b17504b4a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"911003c9a49f882d73fe4c40511816f8","sha1":"240e8d2f0cf44da1b1cf801a1e3eab472d081e34","sha256":"1192299763868ea940054d1bb7529b95620f02490f8f42aba8590a9df6d394b8","sha512":"e1221ebb601b7d8723f7d84c6e9c91aff64ffbc75d66ff89dba9f4499c1c8ef0f09e9819a00573c8302b295228c40cee0f306b92ebdf8522a41ea6156ea1236f","ssdeep":"","tlshash":"363124f9f7edb5d4f91887d0539a56b07b5b21fa7623c50807d21ea0f24162e04a988d","first_seen":"2025-05-02T21:59:25.084344Z","last_seen":"2026-05-25T10:16:26.580654Z","times_seen":423,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: cdf53473-72c4-4ea8-9006-f6cd5da12263\r\nx-mbx-used-weight: 14\r\nx-mbx-used-weight-1m: 14\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 3ec16VGUfea2HpnyprMBRcTDyDYHt3fZn2-6MJ8V_ZTSlrJAJWbyFQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/t1@2x-e288b8ac7184ad4.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/t1@2x-e288b8ac7184ad4.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 41132\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5vRM1EtuQ8PINebln6cJ96pV8BJ0%2FRViLr6Oa3doOuVdQLVvJWf6UdghzIwAOTaQ9TmcmZU2oyfn6XHmGCLO7Vc0JtzDuXFV9d8YX3O624%3D\"}]}\r\ncf-ray: 9c0b174fdb15783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41132,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 500 x 501, 8-bit colormap, non-interlaced","md5":"0bf62566878a908d237e3b99a8c844da","sha1":"7f1e59c0749bbf0f856cfaeb4d5387cb44102042","sha256":"2f58cb348f84b5e4c8efdf8993cbeb37fae4c52d2e08eac6d92279dc0ca93111","sha512":"0ea99fb9a62db89e52ad2d54632eafa125b423bde1edd925187b94f7b606c86d8980c98d3e6cb020d655d005eebe223ead3fa6b786435e0a9022a31efac5bd20","ssdeep":"768:cqZ5g3yUwCyr3Ey4dLXZJ5m3uOc2JJ5L6LXXopMvWj48:cw5g3yUwC7y4dLpJofc2JJMjXopV","tlshash":"920302125afb5d80d100eef03616b2cd18eacae75b6b11ec02d4e3cf464851efad2d5a","first_seen":"2025-06-30T15:48:55.534708Z","last_seen":"2026-02-13T05:23:55.510877Z","times_seen":22,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w6-504f72c18864539.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w6-504f72c18864539.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 9136\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mP%2FRXVHzb0h2XngVP8nRuM5R4LOV9rSc4XzFjHnuOjmxlj6eAe%2F5c8xtBjdYgGMG2EZgrmTizVKPtnHKRCpRSPVaKvgwx9WvUxF3M1%2BME2w%3D\"}]}\r\ncf-ray: 9c0b174feb23783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9136,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"85093cb792266881b531af87deb86c25","sha1":"a7845a4852ab11d88a6c2f39c63e94ab9b2145fd","sha256":"f6b772efccfc8520df0b7d7b8a3a16973ca9072735bd27714d73d4d7c8c6fb33","sha512":"21c430f796fd4f545f2898686b9c09cda8ad5bbbedc53c893d1c1ec9c1cd10d5289dceb9cc06e46c2f926858edd7ab99160cb05b2f596e258a8073b55064f122","ssdeep":"192:YFg5V5J5+8VQOL5iigBzhIddo1DtvBJMqCoXEAGj4TyHfLlMMjHK6666666F:J5V528VQ05lsXZtpLCoXhsfZDK66666X","tlshash":"69129e977950ca93ef94fa3383362bb926f63cb40de8e14a097574064ef45d1c96a883","first_seen":"2025-05-02T12:30:37.98611Z","last_seen":"2026-02-13T05:23:55.392862Z","times_seen":23,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/chart.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 71722\r\ncf-ray: 9c0b175089e10b31-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.5.1\r\nx-jsd-version-type: version\r\netag: W/\"32e8a-y1VYFBBM+4v4jk0bIQM7SVw8Wnc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230181-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 7863\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=02GzHb1qtvrENqewHesrneLrf72EewZ4jXTOBQVKJDBcKZsnniyJDJ1cLAF8CpQ6wrXYZbe1P60Ma2unINZv%2FpWiI%2BIO0TQWQRJiTBZWRSNDTF96qvYa0%2BktcGa1WOZrSPo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56990)","md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-05-31T11:56:16.368645Z","times_seen":4725,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":3,"connect":4,"send":0,"wait":14,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:11.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1364\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: eb68e877-1cd4-4373-a990-0a1f8874a953\r\nx-mbx-used-weight: 34\r\nx-mbx-used-weight-1m: 34\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -pYzeKlbA7TvJLXmQ8x5BfRevI5FbMFZugUxPJWc5Pj6BDrK2cRQ4A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4249,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"60daeefaa4611715eb66c67f7d8b8b14","sha1":"62d6bd9421007312052a9b4c9437d065dfc28c98","sha256":"7a7c14c1817f08661a8d0ddbf6a585af516b4abd68914d14ea4a20f55571b1bf","sha512":"a743a7c812caf7a99c207296870d504d0f5e4e117cbfff460efadccefd0cc812a9707a3fa9993aba916a609d9b50a9d2efb9ef51f150304b85b4e82a9829bb8a","ssdeep":"96:juML9sjvv/CknHg2miP1jxFVmN0FPthoqroOfkloPOxvvKFsaQHCfmT4w:z0vCNxi9jxuNyGtBa2Co4w","tlshash":"1c9167521baa4373fb368c493391b9751e2e7067fdce4ec0daf126b718e21b25649350","first_seen":"2026-01-20T02:20:37.6195Z","last_seen":"2026-01-20T02:20:37.6195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/css/main.css","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/css/main.css HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNEfZ3a6d6v%2FfGpG0nN%2F93EwXid8XzKQ13HTTtY%2BE1enEq60no5mCSsh0TpKBcJNVcOtYPi%2FzxbexmTO0Zas%2FHPuCk%2BaI4pvjMcp0Pvwx%2FI%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fcb00783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138931,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2757), with CRLF line terminators","md5":"7ecedabc1d80feb89b8767700ca93a7f","sha1":"7d6b93074960eb9cfc6a486313ea1cd5cc48782b","sha256":"ee9f365e00598cb794dfcd0397c280d08a2cc4b627620eef5653dc0e336aa35a","sha512":"59b993548f16054a33f32e662484d823f3b35aae300cda6b687b57ba05011f4030d6f36a12f6e9603b9283cc61f2b1f3eb96e9a215f5f17fc00b79358a0a9849","ssdeep":"1536:VYnTfO2BA9ArahuCP9xlUJonjKgUJon8Or7F2wCLWo+DHJAFvLLXxys6:A0XlrjKgr8OMG","tlshash":"3bd3d6309d4b644e93579e95f3b13b26de744473ae834028f1de2c4ce7e64b82ba219d","first_seen":"2025-06-30T15:48:55.438839Z","last_seen":"2026-02-13T05:23:55.476325Z","times_seen":18,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-20T02:20:09.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nset-cookie: JSESSIONID=E966D3DD37CF088154509B9322639233; Path=/; HttpOnly\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVRTgip%2F%2F18edObjax0DkOtjGuPIk6wn5efem47zWNDeB3f%2Fqiw%2FO10LV5Z6z%2FlFRUNhum3TLhTEcKXtCAgceIb9nX00Bpf7FRtJEf4r\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c0b174d5f6db4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":152931,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1941), with CRLF line terminators","md5":"548703069119480afe72a487ba51c896","sha1":"87f318b122366013de0ee82bc8e9af58222b7595","sha256":"4ebb55e99f200b53fba2f2dd7ade64123156c62f180969d006c45d613f911623","sha512":"45866208795c139cfe70ed4a9c2c40a300e10bae4817038a600504c1bcfdd21228ceba2cec63f7f03a4e9f81ac8f73bc74e61fb628fc9764838fd3f1a6d7eaa7","ssdeep":"1536:/MDORVRey0FS3O444sj3IddmXGe+u9SKaSuH7GEtcMPkAZlDUk6RKKlp:tErj3IddgGe+4SKanH7GEtcMPkQUX","tlshash":"94e3652055c11866407383d5dab2af99fea59303d34ac2847afc2bc76ff2d44cd87699","first_seen":"2026-01-20T02:20:37.647985Z","last_seen":"2026-01-20T02:20:37.647985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":22,"dns":8,"connect":1,"send":0,"wait":75,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\ncf-ray: 9c0b17500b68b4f1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659c9856-f8bd\"\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 332080\r\nexpires: Sun, 10 Jan 2027 02:20:09 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NCAdEcO%2FdNfCECCL%2BnrsfrIciHR%2BakvhfL%2FV%2FrfDbfMfnzT7Dy5JgcAYOj4NQcdHYTobNUk%2FE5z6VrFkgejlyIq%2ByW%2FezcHcq3xE31z1MnXAfrK%2B1Z0t63Ds0PbPNju23OBttElt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-05-31T13:19:35.991961Z","times_seen":2003,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":1,"connect":5,"send":0,"wait":12,"receive":6,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/domain_icons/16_1768491294245.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /domain_icons/16_1768491294245.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Thu, 15 Jan 2026 15:34:54 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=51z%2BmhMqQiUaVqaL8ewCnkR2t%2F2iEHw7E%2FmdtBN5kG6ZhNwtWFy6166WQMD8wH%2Bc0uSyhLTw5CFjnT0gRCUkPMuq4YCS27cCqJOFkxZ42Ss%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fcb02783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"fe67192773a868e8fc963a9d7336bdf4","sha1":"88eb8268d1099dad20d55018df69e93e898f2d7f","sha256":"d4e91e2ce107eb477af74af4287f81141ab575facb264740f418349b1e24268a","sha512":"4300eeb4c1c09cf9264121a7e3f62ef5690f8bbd945173e9b0a9a386c7f4959018cb21ecd0b0abc39565c37812b80e3d5741b9a816d598bf253de29b6c0ea536","ssdeep":"","tlshash":"f6210014eaab1370ecc747248835d9f43b5ba09d6702b77cc076a320711ead9ca80dee","first_seen":"2026-01-20T02:20:37.59565Z","last_seen":"2026-01-20T02:24:22.379793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/coins/BTC.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/coins/BTC.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 1125\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGBu4ZXgHz9mTSI3FlCGObT9xMKovDhxG24Un1eBgZlLyYircLfqgxkl7XelBHC51tcKYRooKhvYYW1enwBenIxs%2By1NmCwbXGwChS3DKso%3D\"}]}\r\ncf-ray: 9c0b174fdb0e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-05-27T01:42:46.364934Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w1-81831204a1eb676.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w1-81831204a1eb676.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 9006\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2Qn0lC2DShlqy%2Btfg8WBFIW508isAGuCGIPwVjKCGa8%2BkftwT1bly7iW7sXAPx8vBT6l%2Bcf9h4TY9P4l1C9lBhgqUwfGYMY%2BkZ0z8pPQHQ%3D\"}]}\r\ncf-ray: 9c0b174feb1d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9006,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"e499637a13e21d06808308fefa899b64","sha1":"58ea69f9c4fb155d67f8f177fbb9e2ccf5410e08","sha256":"42c04f9f9dede93e5aa3cf52c4994872d39dd24125a8aec874e3fa9ca808446b","sha512":"af27026c98dff6544515ab1e20ce408198e08408df2ba8c7118c09a64545f5e1bee42601dc0a4db1b9b461712f7d8333bee5da78284ed0b38d9bc934759cb467","ssdeep":"192:zUzDA3bL/ENwl3S8nDsT2luBq5ArKRZazMtQXo8ofWBZGqOHQsyN:oiDENTGelefWGqOwd","tlshash":"a7028cbe8080b8234eb8d9447a0d5f23b21541dc2aae4304fc358cd3e8e856ca5abf11","first_seen":"2025-05-02T12:30:38.004233Z","last_seen":"2026-02-13T05:23:55.47389Z","times_seen":23,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w19-83a5dc259a2b5d5.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w19-83a5dc259a2b5d5.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 7387\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJtdb0OMTRFj%2FIbqpaXDq1hVM%2BrDQuuSodWMnQPzVGbo1PD%2BJlwaAN9q8TA9qoA8ixElVCADqjGBvsa1nnGmz8afCI8oXLRB3dvaIaLbmis%3D\"}]}\r\ncf-ray: 9c0b17500b31783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7387,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"1816c510f899d9ce98bf267f665a6dde","sha1":"78b0954502609d3fe434bc0edaeafdd7a23bc00d","sha256":"67d8113753fafee8821fcc7948c445ed1ef4096cba8128c3dd894bf66dcb840f","sha512":"4c24c250e647f21746ba7943524438ba64aaf97aa77cb2eeb89856219ca27697cfb7b38514285b5f8d9f0494b654846f7a83a28253b82e3c2a5d98177c75403a","ssdeep":"192:6BPMTaaaaaaaaaaaaaaaaaP/BjTVn0glf/VVQ7CzAaWvQm9ohcPL:WkTaaaaaaaaaaaaaaaaaBjTJ0g5DQ7Cy","tlshash":"2fe15b7e7d035283dfe5b9878b9bd387b1922b03b4c31553858722aa865afd30587f18","first_seen":"2025-05-02T12:30:37.984568Z","last_seen":"2026-02-13T05:23:55.397627Z","times_seen":23,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w21-33ec6b3731c9bbe.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w21-33ec6b3731c9bbe.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 12272\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36qizxGkI7Z7W0hDaoH2T2PQ9Wdw1zv2pqoHx3MFWvXmvdCEWShDn4dkXYfOO9y3ceWroKFep6NnK6nli%2FDOIZY0lNmmaozfcq%2FIGxDkycI%3D\"}]}\r\ncf-ray: 9c0b17500b32783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12272,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"17a0c80b237605fab701510300446abc","sha1":"84526d21e22af05881d901ee11e4756691d35459","sha256":"a154cb9bc6063ac525ea53e19b85a3d5d5844fcdf178b40d6595171e18b7a88a","sha512":"551101234e222b7d3d33fb09e45a40ebfe432cacf39d19993ecc2e4289d9ca2844358fb5992f567cd831518ba50e23b9f6ecbb5605bf775944d38f55e801dc6e","ssdeep":"192:LkaIfZmaX5FQR86GkZ0aKPOwwvg40qRrVuEfmTUIF0qEmmczOfHiGYir:LkXNXML0aKP0rV7fmTUIuqEmhAD3","tlshash":"c042bfba107143fcbd9c873b4b9104267904f08c2a6d3e899a28c07e7b799d61faf056","first_seen":"2025-05-02T12:30:37.991648Z","last_seen":"2026-02-13T05:23:55.444851Z","times_seen":23,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w25-db6a0e21bf7ac85.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w25-db6a0e21bf7ac85.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 7457\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWUG3kOKx1jFfLbqLHzomFJDiRo%2BArYct6MMz24pk2oPp%2B%2FPwRGzW2Rea9rVrtPSW75TNV7m5psLMQW8F1PUNcoQWJGK9AMgcOtJjccam0M%3D\"}]}\r\ncf-ray: 9c0b17500b36783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7457,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"54a50929c5349fedd4859b46bab7fab4","sha1":"74d653da04399476d9729c6de1f9d3e52808adad","sha256":"1e28aae6e44018ca825b07d219d0922625edf9aa369a2d1a0d68cc44165fcd55","sha512":"113fe49f5518667aedfc01df29086cddcc7f8e0fadee7aac3383fa9305176141f9266034882134975fa3b3642efa2c7e063901bf6399cb405bf89016d6250078","ssdeep":"192:9Pdx6sItuVtB5B6TSN4+gV5/AtK7TNvi5k:ty1obB6mNTg7AY7TNCk","tlshash":"07f18e9221c1ae74e09379ceeaa184c5345784cc2058003b983f26b85a5f9ec27e5afb","first_seen":"2025-05-02T12:30:37.941007Z","last_seen":"2026-02-13T05:23:55.425142Z","times_seen":23,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w36-205a6efd723b050.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w36-205a6efd723b050.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 11491\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qiOcPhhEmxCcPC5rPsQ%2Bl4SbLdOxNeQ9Xbh5gblEqEGtm2qjnyymnRNtb%2F9%2BGh1Xy7vyCePklEeVuF0VOQOlAcxF%2FRe3tFKPGi%2FBUyF9Dbk%3D\"}]}\r\ncf-ray: 9c0b17502b42783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11491,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"28c4136e83e20e52aa70c7c4c0459161","sha1":"bb5f9df43feea3feb53e5529e32bfd87d89fefec","sha256":"64d0140aab529081490e958af109031ee2146f235fa3f52e2cfdaeea7fb4c0fa","sha512":"a83912de09879ca3a44b244bc42c1c80e52be44ff54a5abd28827bde9ff6ab1da349cd21c824e292d5fac77de426ce00e54bafc78b173608f9716cdb73c0d670","ssdeep":"192:/WiRJAfoXIc21Oad7p1leqfIfmXwhGDtFJsH/W6TIlB+dR9Ms1gkNaG7IV1QKu:RJuo4c0OQ7p7eTfmbtFUeyII/KYIbQKu","tlshash":"c132be7b6e831557408b97d0b81b31e342e3bb892f322f71b09fc4dd4906a4267e28c0","first_seen":"2025-05-02T12:30:37.962247Z","last_seen":"2026-02-13T05:23:55.490538Z","times_seen":23,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/header/card.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/header/card.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 738\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7kX2HdPxhEzjRuMkuxKd%2FSZpn0oC1uWSFuPcO4uz3SmsSFeIMeFypPrt6QoLlN6ZBjGYRi2FIhV%2B4wyjByZHF1kxYVw0hPjD8uoN1pfW0Q%3D\"}]}\r\ncf-ray: 9c0b174fcb08783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"ac99733531433a0796fc9be34c7c554d","sha1":"0e4286554815249bbf875c336c3f1a74d28dc72b","sha256":"105ecb0d39ec901cd50f0e0f31a037f8650812b1bd9c803b58166bfff0e823ea","sha512":"55ee9d763f26f870211206977a6954d9a7c8e2dfa40647551c4f19989b686665df296b49d457ba7871fced97d1164818feb3cf8301bd2bb00e386c55a67dae65","ssdeep":"","tlshash":"da0165cb26804f5e0d2f30704f53d578106c885a89a61b6d2e00e0ba0c20a85e925b15","first_seen":"2025-06-30T14:26:49.361581Z","last_seen":"2026-05-25T10:16:26.56807Z","times_seen":188,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/t2@2x-39385dfebf0a9b8.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/t2@2x-39385dfebf0a9b8.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 26225\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBX1pV8vWdBA2RSogQ3ngt1hZyB%2B%2BWn0%2FQ8TN2DohgG40Qs9mz3UUX5iFzCOmgjFji6WhfeE61togqnNoUczRMYRqzjOYTNDtBa9up2Sv5E%3D\"}]}\r\ncf-ray: 9c0b174fdb17783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26225,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 500 x 501, 8-bit colormap, non-interlaced","md5":"2c719d6aeaae9af100c40c4b256e3126","sha1":"78ababa829e3190d4aabbd85fa5c08ab36aa9f6c","sha256":"cf7fcd69e2daee51e97c9395bbe38d8db85fe00491d3bf6589926c14e8eb470f","sha512":"3f5b136f7c0f7c1f9fae90d546df9f9d3451948bcaaeba9f896f2c3775e3ac740549c4350d1afc602579ac8b75ce6194a34066420366485b6e1dfd3312dd68ae","ssdeep":"768:xTPzMFYpK0W+ELCQwK1YqwzZ0lKICV2dLCQtP:xrzMYpKQDQwK1YJOMIZmQtP","tlshash":"52c2e0eb1852eea4f01d6a34987525e5f7f8b9b88c346263f65b8ccd0300785b9063b6","first_seen":"2025-06-30T15:48:55.392152Z","last_seen":"2026-02-13T05:23:55.420388Z","times_seen":22,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w22-a912cdba3f9a855.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w22-a912cdba3f9a855.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 15865\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJhjCfd2CAKRO2GXApb1UjTvVJffI1ODO9mewPEx0M%2BucIacz0LsFSNTkzZ1zJI2cZBV%2FkH9IQm9yTy%2BGRUDnvwauVwdDZKElYSirODH5nM%3D\"}]}\r\ncf-ray: 9c0b17500b33783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15865,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"dd0e22523a2120c7c14bb92005046707","sha1":"b0294e1eb4d545647a1e5391369f066b8e2e9f99","sha256":"958f68342f1b4e6931e0ae00d81fe9c390f3bd06aebb383a8dbbe9c24738b46f","sha512":"ef1a6633b8be52094aae8b4ad26cbe95a107094cb63056d181d75e942ddb53f335c980f4dadd0ee38e19873bf3bc6084e313e10e5fc34b2b73be56e23742d26b","ssdeep":"192:J+App6QJM8UWMjjgZWGlPB+zMFlWSb2s0Bs16v/8kJ6cILsc6S0sONwL:JDpp6atAYs08zMFltbgBT/nJ6oUL","tlshash":"2362d09798247949341353fde8afdd224df49ed01b5b209eb02ac9f69534873d0e27c8","first_seen":"2025-05-02T12:30:37.931701Z","last_seen":"2026-02-13T05:23:55.514766Z","times_seen":23,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w28-004c3dbe1848472.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w28-004c3dbe1848472.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 8473\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFnXciDGqgZZuHrsInP0yDcITpOdNIVoYPcWFwWBgYJceAtT2ViHC%2BWVbsIAgMGnb73TX5D0T1rigcO0XquCZOqKg6aSgjjicXy1phql1tM%3D\"}]}\r\ncf-ray: 9c0b17502b38783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8473,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"587142090e755969285827cfcb3933d8","sha1":"b6e642e0b8ff649779f7158f8db9ee9a062d211c","sha256":"35a6fd5aa72dbda453f624facc6d30e89bea073aacc3517d727f65166eccec06","sha512":"cb7ddadf37a5e5e2fea47750923562eaf0e42e3bf8d00f6ec85a1cec115a5d893e82dd71d26264ae31a8262546764675809907e28dcb2298773936ee06f5d7e6","ssdeep":"192:onAxLjDc9T//a4FrOESOgZ0gFtZzMgVavAsNE7EjY:oGjDcF/ZB3SOgZZFE/vRmEk","tlshash":"a3027f69c06444a731277d02bba27ef77cb05838653c16b5cf2bb611b1ab4fc09d7a19","first_seen":"2025-05-02T12:30:37.968371Z","last_seen":"2026-02-13T05:23:55.43022Z","times_seen":23,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w39-be4907cfecc795b.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w39-be4907cfecc795b.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 4889\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eoy9OunRTtsxG1kZ1hVhe%2BObAV5xO%2BEHwK%2B0KEF%2FVxNO%2BbUUnglDqvsBfl5zA0ZLo0WBlG7FQRYaltZ%2FjQqGy1onRlpEcXXRNs4%2FTIzrcQc%3D\"}]}\r\ncf-ray: 9c0b17503b45783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4889,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit colormap, non-interlaced","md5":"524cea36286e7f39fb588f50306e9714","sha1":"d96cdbc21451a9917f7f5aec2f03101ad155ee98","sha256":"7e83dfaaf25f7d0b811285437a131eab74f5972bc8374dbd741d063a2932c153","sha512":"10d7748cea8a7d1f08aa56a3b793cb158dd0f4a3cd6d25046a8d63a0d296d67ed136f0f1c0d2b8d71d6131516708fc64bef5911507110c79dab6e7f4dffde87c","ssdeep":"96:i0adzOM6SxO9qklP5reYKwp4cV5wLKhHY+OMzvX1Tr0f+6Z3iIxlAJLPvvho:iXd6MG08kYZp4cV59h4xMz4+SSIxlAJC","tlshash":"ada17cec579c70ef0f4392d638c12293d4bb5239978e1a5d38276e0ebd2419d17d9086","first_seen":"2025-05-02T12:30:37.943873Z","last_seen":"2026-02-13T05:23:55.486263Z","times_seen":23,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/img/header/heat-map.svg","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/img/header/heat-map.svg HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B79DnLK05hEBDnAvmbLJ5lNFvTZ1FUPsy5TCVcpCHaLaono3montu3t2Pu4BbIoPuem6TnogT%2BtnbrCTA4VLSbis4K5BfBNiSyJcAUlC6Cg%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9c0b174fcb06783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"16852ba4bfe972606e98728eee8b1f55","sha1":"7f99153c01c571dbd8fe8c27fac5c96bc67d49da","sha256":"92f2e89e2e124f61c1eff8695ff4fe2e5b7448a5e95ec0c2770100c0234d52e2","sha512":"d6ab0d87d30ec3a061755b1ad0b0cc752e6fdeb4b2becd5a28d41a57031f0dcfeae6330c8616a8d61e87bb041722aad955523728aaa2843b3630a52ef6196c7d","ssdeep":"","tlshash":"c841b8e5573985790b18d72c5a7a7a0a1ef214d7667084acfb2e283a3743dd310c0f98","first_seen":"2025-06-30T14:26:49.403614Z","last_seen":"2026-05-25T10:16:26.584141Z","times_seen":119,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alpinechange.com/assets/landings/3/w35-ae5190a3990b7eb.png","fqdn":"alpinechange.com","domain":"alpinechange.com","tld":"com"},"ip":{"addr":"172.67.153.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:09.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alpinechange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 15:02:53 GMT","end":"Wed, 15 Apr 2026 16:02:33 GMT"},"fingerprint":{"sha1":"D2:84:0E:7B:C5:E1:14:E1:61:CD:12:D2:17:AA:C1:15:1D:F4:F4:C1","sha256":"66:B3:BC:26:D6:5B:63:BE:52:06:86:2D:37:43:A6:C2:9E:8F:66:FB:8A:D4:9C:3B:C3:8E:DD:1E:34:7D:14:D9"}}},"request":{"raw":"GET /assets/landings/3/w35-ae5190a3990b7eb.png HTTP/1.1\r\nHost: alpinechange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alpinechange.com/\r\nCookie: JSESSIONID=E966D3DD37CF088154509B9322639233\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Mon, 08 Dec 2025 21:31:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 20 Jan 2026 02:20:09 GMT\r\ncontent-length: 7443\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6YO0kCi2Sb8EztUoJuQm47%2FHp5%2FHrIT55d8fMKzFOnbFpzNYnRetluwQy0fTt2LbZAteYaryUJ9KGlUd5RyrbtvvPEdEujT6D%2FNrka4b3%2Fk%3D\"}]}\r\ncf-ray: 9c0b17502b40783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7443,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 360 x 146, 8-bit/color RGBA, non-interlaced","md5":"fc22175c489cf74db27410e9db204542","sha1":"548f215a86227e77d84c330d2c80328791e1433a","sha256":"d7d3f087cb107c5ac8921429ee2d40e3590a44c0568a0e76c0bfa42b73fbfbf7","sha512":"dde42c96e8d090bc1cdd4c3a3b1a0e02d49e632d42539152da9280b7969edb22398ff2b0de144f94bcd45af1fb57a378c321117395246853e1a897940fb38269","ssdeep":"192:CDvH5bbbb+2nzLgEN7x2cNpHjiTbxH7YsTBO7IKN0o5dt111BPU6:CDvH5bbbb+O1FifZZtOjN95dt111BPU6","tlshash":"a4e19f24a2324dd57bc4fd9b451fda6c205767afdc298a81a57873fc51478c04abfac0","first_seen":"2025-05-02T12:30:37.981076Z","last_seen":"2026-02-13T05:23:55.509701Z","times_seen":23,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"alpinechange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alpinechange.com/","date":"2026-01-20T02:20:10.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alpinechange.com/\r\nOrigin: https://alpinechange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1403\r\ndate: Tue, 20 Jan 2026 02:20:11 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 1e7af769-f25e-4619-8dad-f3496bca961b\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: cVtritfaMfVfy2EfQFmFzQNaHYDmCBS8sAm2OHxyWWnWPyA3f0xl1A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4274,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98d0704d6c85bde091ece2e77eb255a4","sha1":"32e421461d17c9934e4d8b7f615d109023f54c7b","sha256":"6b3a47e7e47918667d1e30ce2d662b3341c2ac145350625978f6f1940b9494ac","sha512":"ac6a126280a10979a121e41ad91df0126d875a30bff00a6600b783ee24684bbe7b439096c6cbb031642d737b17ccc060d74f9e999b92ffcca47dc11bb003252b","ssdeep":"96:qKjCZTVbivfXCeEvmRN6i5dg4dpq5+Sek6YrCK:qKOZJU3KmRNX/gIq0hQ","tlshash":"669188520b9617bcfb37490e3386bd610ea6706bbec64cd0c8d12a6719e28725b4c394","first_seen":"2026-01-20T02:20:37.583308Z","last_seen":"2026-01-20T02:20:37.583308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
