{"report_id":"42091433-2b9d-4a7d-abb4-c5af9117a707","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-03-27T15:24:14Z","url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"104.21.4.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"title":"Buy \u0026 Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Bitmadex","dom":{"size":478810,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5511)","md5":"a3abcb28f174c09e43355458e6b52f7e","sha1":"ff1e404573db9db48c24c2276674e1a96e8a9838","sha256":"798f616187623d8534d668794bdcaff12f7d1023548f9f5f5f9e603d69d2c0c2","sha512":"042ebeecb2de39d1be9c706ec55bc3cb3527550af94b459633a8c89302a2e64fbf172efb46cc61e0b092bcaf5271c5b1292a35149bcc7160422b49c150cf0d70","ssdeep":"12288:FwJvUCcbIz24w24LijHOWJiuyX8sBBhrhWThYGKLLUPt9r/:o","tlshash":"d3a46b7063f11259b003c3a88bf95a263667d853e902c69877ec1ed0dfc799e9d9324b","dom_hash":"domhash3edb4b65a51b03ce579e2963501f76b7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"104.21.4.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T15:24:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"api.binance.com","ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-03-25T09:51:48.269437Z","alert_count":0,"request_count":9,"received_data":41028,"sent_data":4326,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":3,"received_data":383883,"sent_data":1316,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":34196,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-22T23:03:50.420873Z","alert_count":0,"request_count":1,"received_data":88169,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-22T22:31:48.48691Z","alert_count":0,"request_count":2,"received_data":654177,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"grizzlychange.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-12","domain_rank":0,"first_seen":"2026-03-27T15:24:17.836673Z","last_seen":"2026-03-27T15:24:17.836673Z","alert_count":64,"request_count":63,"received_data":6227388,"sent_data":32690,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":3,"received_data":131913,"sent_data":1656,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"grizzlychange.com/assets/js/main.js?v=5","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8129e7a736eb7ab1bb4ee9f4d919fdc","sha1":"268925c35b15f7b723c0c4ff913610f7c22bbd12","sha256":"0fa2bfa1e742acff380af5b6ea26a4cddf165f7313c43d64cec77e2de97ab7a9","sha512":"5efb0f92dbb776182f79fa6ca42a0f22e44b753fc11a335a4de33b46b1a23c6d47bd682063b010144cd32e00a5e7bdbfba5db45a0049339b7a0db0388da2318e","ssdeep":"192:GVH2ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxg4S7/:GXKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"64928298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","size":21249,"data":"","first_seen":"2025-06-19T20:02:29.443643Z","last_seen":"2026-04-25T21:37:12.794526Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","size":208522,"data":"","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-04-27T03:40:14.992078Z","times_seen":3839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1b4f8e8b753a907a11299f8cc0e4145","sha1":"b0f712cd9817c6edd730abdedd6e4451639d186e","sha256":"8769f2980fcad87c443a484870e3bbc4fbe40546be12c57cfabfbd86e883f086","sha512":"1ab4e7f428726f910b5f20eb6b7a96ecdef7ad1f82a742baf850fabdbbb95d1c789ad033341c2fae206f63808bf7c8f8e414cb6b59cdde18725fc61db63086ab","ssdeep":"","tlshash":"1411b4044070016209b2662a1f2ea310656252474debbc34389c8a849f6911f86b87f5","size":976,"data":"","first_seen":"2025-06-30T14:26:49.418257Z","last_seen":"2026-04-25T21:37:12.818481Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-04-27T02:06:40.801632Z","times_seen":1472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d450bea2ae4b035e95c4bf621486c13","sha1":"3567c232074d9d2f96b7d4ce489a61c2d933a606","sha256":"d6fb2166159f96b4e113a78266e6b2591ff8a549d647ae58e0c743b5832db5fd","sha512":"8738ca7fc79b4ff1fb451c923c83c58eb9db9c399cb63e1c61c3b340a678d7069744c42f2ea78406b459a56e924e36c8df341ef1f7d45cf7969772015e8eb69f","ssdeep":"","tlshash":"c5e02b8b370f4c71549ba6872f7f7305f843213b99a1a421295d6204cf61e17a304cd0","size":295,"data":"","first_seen":"2025-06-19T20:02:29.562271Z","last_seen":"2026-04-25T21:37:12.818958Z","times_seen":322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/js/noti.js?v=3","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","size":12111,"data":"","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-04-25T21:37:12.808324Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe8462dc5678e9f3091b64ec50361a58","sha1":"506e741fb2c2e2dc13ce89456af416e3b78c5823","sha256":"a2a2a71a1bfc6599fe99d8a524df0aca331deb4d217df2fd755aaa0fc2acde36","sha512":"2c039d3c82a63c59bb3cf427f0205599ccce4c78fcd376e982871a894ebc2073b25e959ac5768bcb392d80efd6f78a99dfed7755c5a2912aca889ad8b4b89048","ssdeep":"","tlshash":"4c01991b1c5360fe22ea203ee73b2a0a22152a872141c0533d9c80282fd08242fadbcd","size":714,"data":"","first_seen":"2025-06-22T10:42:51.78747Z","last_seen":"2026-04-25T21:37:12.819463Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e164d5ae02a2209d639ffc7cbc85c900","sha1":"459267c1b7e040ce10af3f981587596525b5c7e0","sha256":"db64c8fe03f2692f49db33ec9f12454e49c59e5dcb6ecc657ef764eccc89ab00","sha512":"d9da3a981e4acc051c4a579394163e1bfb8468688461bbaee5384a664a356360e053ae59918ac8e7f8d4be0ce4c7d8a3239f2c199af2ab8847d66071ba037516","ssdeep":"","tlshash":"5421761d92f516344573b16b13cf5c1d293110bbf089ca3c3e6debc05fa10a499a6ac9","size":1319,"data":"","first_seen":"2025-06-19T20:02:29.567184Z","last_seen":"2026-04-25T21:37:12.821906Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72ee8adb330d5ca4c5d68c08d2c82d4d","sha1":"51852bc01b5edbbf37ea930915b13bf25816caa5","sha256":"794eba715fe6fe2f8036b6b751f3749fe868102e0d1d1ba0ae7bf85de90f2240","sha512":"3e09f830b768b8a9814f106064fa83947183b3e0c3b6786a5a1fa46a28bb2f284c8233f603c50080c9a3571a1e3644817dd60c8df42b78e9f811f0ab4cf95284","ssdeep":"","tlshash":"01f0264a23b54270a46fa91f819b11083b518047681af858370c42d06f5efaea2b37e6","size":494,"data":"","first_seen":"2024-12-06T22:27:57.13338Z","last_seen":"2026-04-25T21:37:12.822999Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/js/toastr.js","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-04-25T21:37:12.807784Z","times_seen":893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1870326e7e2581c17a2d8483275e697c","sha1":"12e42d5cffaa0dfae1c50982657599d032c1f5b6","sha256":"f178f3a61d6e863ab5041c32429147a5685afd75f730d9338aaa3ded19c3be96","sha512":"9b910ebee21f3ae000b4ed67e4c36c6a91827f9b6609a2f7e859b56e076a83e751f000ab179583038f5297d121f7d06b4c75448b66d1a69e339b6397a398d025","ssdeep":"96:By5RgaBWaBMLPND2n/a7mLp/gDJPYpiS4eJJWOhev0nvDJeYQeeJJWOhev0K:SnfyD2nQmVgsYOkv0BsYOkv0K","tlshash":"23d1436c99ba192c607770eb1a9f47099191e10b3e86dee97e0c43505f7a07cd4fb389","size":6663,"data":"","first_seen":"2024-12-06T22:27:57.134398Z","last_seen":"2026-04-25T21:37:12.823539Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-27T04:07:52.727565Z","times_seen":144951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/cryptocurrencies.min.js","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37257948808f476a1ff0737b2a22c9fe","sha1":"736ae1b7c5597458834c9704571b99bd45aa6231","sha256":"f6af42497aae5f14a17aa2d68c0ae2d551332e96f2efb23a428cdecff879c2b3","sha512":"3f5dcd87cf322f465879172c431b73e02eff51eec9eb4ed39ea29364fe8953577ddd8119434456b873ffa81e2d73c5376621d6b53a37e4ac0f98c9342d5cf440","ssdeep":"","tlshash":"7801b56b394e343555ce21bf42769a8c20aa013c754266e13e2a898c6071ca2f4aa9ec","size":749,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-04-25T21:37:12.813045Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-04-27T03:50:58.464434Z","times_seen":17145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659c9856-f8bd\"\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 209582\r\nexpires: Wed, 17 Mar 2027 15:23:50 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0GCt8GESw4KGTpadnzk4Nlfq%2B2aIJCd4UKiLAMMXLQJRgg7gKCF6U48oTkYH1E1SGlcap9uwy7cjdrJJkGMVPz%2BsgQB8WiEEnAivWL0Yi3t7kYjKzfEVQGZcuXFAEaBU7I3jQNV\"}]}\r\ncf-ray: 9e2f660b3f26569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-04-27T02:06:40.801632Z","times_seen":1472,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":16,"dns":4,"connect":2,"send":0,"wait":10,"receive":3,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/header/card.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/header/card.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 738\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0pMuo7SuUhX5qutCKWIFrw%2BWFmpjJq7l7tZDGCG0Z6WmkzveMg59h%2F2nDIrSGnhkStfPY5K6LGdaHlS4XI0W9%2B4jTh6ereTx55MLdts4VmmtGN7cYr8KWT%2BgVzdx9%2Fi3FAKOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660afda623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"ac99733531433a0796fc9be34c7c554d","sha1":"0e4286554815249bbf875c336c3f1a74d28dc72b","sha256":"105ecb0d39ec901cd50f0e0f31a037f8650812b1bd9c803b58166bfff0e823ea","sha512":"55ee9d763f26f870211206977a6954d9a7c8e2dfa40647551c4f19989b686665df296b49d457ba7871fced97d1164818feb3cf8301bd2bb00e386c55a67dae65","ssdeep":"","tlshash":"da0165cb26804f5e0d2f30704f53d578106c885a89a61b6d2e00e0ba0c20a85e925b15","first_seen":"2025-06-30T14:26:49.361581Z","last_seen":"2026-04-25T21:37:12.814422Z","times_seen":175,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/7.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/7.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 42550\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zlW5GHC7ojJaLeJzMo1%2BOiUzlATBnSR5pJM6%2B1wo6TvXLXXBAJIfwpj842RWfQLk5rPck5pC3oIpsp97DdrVoaby7wy0sh23ctFgvDgX4te6BWqBw0N3BRw2JH7JXA3%2BVnglA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660bd85823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42550,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"77f5e8c0c5e08644d1389563ef59f093","sha1":"f494940e650fc06b758c8ec347f4c6c1789eb3bb","sha256":"8f096abdd2ad6e2414bf3a86fa617258ebd4974238cfacca2b0161baaa495981","sha512":"a4cbb669ce84697ad6556a4a340aa92da56204fd6e07e2f660e0b3ee2c1ea03f5062f23dc9b33253d5a647e13a12b72dbdb209c7d72575319a8e71faefa50aeb","ssdeep":"768:aHXyPs/78bA4PuPXrFrK38DaQrRVvZ1nzbVC9hmeJJR:aHmgP7ZI8mQrRhZ1n3EhmeJJR","tlshash":"6313e31399099f83a53893a5bf530f6c5f596b0ca5d27aef40271e877b603360c9e02d","first_seen":"2025-06-30T14:26:49.371616Z","last_seen":"2026-04-25T21:37:12.806326Z","times_seen":81,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/js/noti.js?v=3","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/js/noti.js?v=3 HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2LszWr4P%2FPl%2F7IyzDXN3LBoo7bD52PGhMYAuypeLITvIysy%2BhRaYR0LIeEHertYRgCohxsELy2VB257ZKOYcLwxRv2MdsxJai%2B438iW7D9EDPZ14hXfec%2BVpMg2%2BDw9%2B5JUDg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660cdb2e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12111,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (344), with CRLF line terminators","md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-04-25T21:37:12.808324Z","times_seen":269,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 10:17:38 GMT\r\nexpires: Fri, 26 Mar 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 104774\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-27T04:09:43.184306Z","times_seen":101104,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":195,"dns":9,"connect":15,"send":0,"wait":15,"receive":8,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/logo.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=6,i=?0\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MW9QA1gZ%2FaOnQ0SC5M4kvyuPP1mG67OucZDD6b6wf34JT%2BbC349JdD7ngt6Z97ZkdglvmfdxyJCGShQAukaWRApDp6C5ce7iZtsnWxEv23pFqnSB5d56cbcm6gMjd6%2Fjnix0kg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f66132d2a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8de8bf461d9961680647e78f69eac5ae","sha1":"cf5ea57c7f73e047b66a5199302eff1e958fc26e","sha256":"606375a97e3c2a44350ef2887d186d385e34bcf8e853c61c6dd547c7cc3b46b2","sha512":"1ea1093ea3a124a8322e0956d483aedea0f4d9924e737dbe03433b7df7e6882610e9c481dd533bd61f84343428ec84a1c3709bd942802a3d4519adcf7d399a72","ssdeep":"","tlshash":"fb21df6ed3185c3bf02bc36cd6f0801652a66149e6c9c7e5f7a8b71f6515ca31c29788","first_seen":"2024-12-06T22:27:57.075232Z","last_seen":"2026-04-09T20:03:33.946949Z","times_seen":219,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/10.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/10.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 39694\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvdMG1rYio7Eg3wlZa%2Fo%2BDkeuLChbvAESPtfeqaundm%2BbL8Y5rq7XpEkrY%2BRhcmT7taxuEQXg0a5TyXxm5ZUsD6Ohg36EVi5ZJsZAGO7qzDnFdHizjpm%2BmgAWzlaJBtJxfoJvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660be86f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39694,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"5eb223e051d22043cef4f31711d00b0a","sha1":"5ffa87b40a2cf2134844959ddc31431cc91a3d1a","sha256":"f5a475695b41562f84145c3e551c9620e88f1e88dfab172f2f52089666e27288","sha512":"b757ae8a6ca274f3081ef9f52d0a042f0c49c3cf7acb21888cec8625a49ac8d49fcd31ea444fbec48c1535e8712b8febe628d75b352f7d95eb97f6160d29346a","ssdeep":"768:aCI2sjya/2vwcancw99PEd8ctP12jXQazkZ5/7zFIHbvwR3BWuRgnp:aCUeL4cantPEdd2k+I5uQW8w","tlshash":"de0384439d089b83546943e97e035ead2f4a6b5dd8c23aef00630edb7e647361c9e11e","first_seen":"2025-06-30T14:26:49.416446Z","last_seen":"2026-04-25T21:37:12.779286Z","times_seen":81,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/support-logo-chat.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/support-logo-chat.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyJF2n8c4b5piw9yVPtBAYTcs51A0fILpsoO%2BjQhS4MoXOGNPiFN7hSi8wDCvwYbExAHlDx%2BnTSINbbYhobFwPAMzowOWm%2FqUT%2FGpMEtcdpWmlrc1sCVQ2oBsSBFp5PhAbUGkw%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660cdb0623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"911003c9a49f882d73fe4c40511816f8","sha1":"240e8d2f0cf44da1b1cf801a1e3eab472d081e34","sha256":"1192299763868ea940054d1bb7529b95620f02490f8f42aba8590a9df6d394b8","sha512":"e1221ebb601b7d8723f7d84c6e9c91aff64ffbc75d66ff89dba9f4499c1c8ef0f09e9819a00573c8302b295228c40cee0f306b92ebdf8522a41ea6156ea1236f","ssdeep":"","tlshash":"363124f9f7edb5d4f91887d0539a56b07b5b21fa7623c50807d21ea0f24162e04a988d","first_seen":"2025-05-02T21:59:25.084344Z","last_seen":"2026-04-25T21:37:12.803423Z","times_seen":410,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/3/20390302410bf2bf.p.ttf","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/3/20390302410bf2bf.p.ttf HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/assets/landings/1/fc74fa5d8eedd6f5.css\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OYSU62YKv2SEe%2FIjygbA1UBebSOKhQaDDa5CMQB2jovczImUJUjM5vfFvRFW84TPQ38MryUV9vLHISIn4tIH4jF7nuD6Q%2BBX0dSvRTZskzfnfLhNS%2B5s1Cw5U5tpr3NaIkNsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660ef8ac23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":74729,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953), with CRLF line terminators","md5":"e64ebbfc14988b9012713c12fbff2c50","sha1":"699d17b8669f352d2003d07416883f505de8b24b","sha256":"c5abd05d679241850ea971e20efa0486dfd1f84f6eb2d5ceec05414e55b528bc","sha512":"1f484e315a3924a3aec1e1d3b89c3edebd5fdc7362c038e659449394dcb3bf7777d05fd2bb8a7d4f3144928175c3168a867b5fdaf03008f3c4acef852bdbd65d","ssdeep":"768:zbq/GGhM2EGWUWvbnK54447zHItQmyu1G+OSF:y/RENdnu4447zHItQmDG+O2","tlshash":"2c73836065c0585281378398a6b29ba9fa6581179b4ec68072fc3fc75ff2e81cec351f","first_seen":"2026-03-27T15:07:52.636106Z","last_seen":"2026-03-27T15:24:20.490583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/css/root.css?v=6","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/css/root.css?v=6 HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yk3ymVrmtjjsn2mVw5R5oD3cG%2FgPQ2VxOqPogq3shDDsWfxOzdVq8HotQgddN8u%2FvdmZ%2BJJqntJyBjzITZyHFSHV76sxk6wVS7ur1hQxz0UepyvPY8PDEyYgSeXdJ2qZELqGfw%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660afda223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468617,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11070), with CRLF line terminators","md5":"aae60af88f09730529aa34099c9a954e","sha1":"a8ceeb812ea7e5f794f095cc0fa7cb9a89651747","sha256":"e30ca4f03117d18001bd40b500fb64a6a5e7958980a15b918b62a441ca99d872","sha512":"77e70b87fc611d4979cbfe6ea0ff5880a781c1a5be989eb8a87e419f12aa1e0d7ee3385fe449855ff58a66bf214346c0b8ecdc336c4ebc3acea7eab3037acdea","ssdeep":"12288:9MlXqMl7MlXqMlXOMlX6MlaMl9lQFjM9MleMl7MlUMlkOMlJMlMMleMlX7MlXfM/:P","tlshash":"8f2583b7e546140341739a7b9bd3a378db7c40278b0160a639ee75448ff42958ba3e8f","first_seen":"2025-07-27T02:35:37.343068Z","last_seen":"2026-04-25T21:37:12.791665Z","times_seen":101,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/1.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/1.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 63083\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gx%2Fiu7gw0m0n8u95B2HTfb10cf2gbGk8blHRh7Bo3WEkkOh24C98UDY56R5%2B1qvuvag%2Bj%2BAUp1TQfApjdN9Pv%2F38nQgf6dTz0HmNBaYEPAM%2FzFCS7e58Xnb6qQsUiSF8RmsOhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660bd82a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63083,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"40da477cfa7422afb50cbf7f79325673","sha1":"cfd7d53197df6fcc2e2cd2cbc701df8c9813844b","sha256":"b70c5b10102466486a02b2cb56f58db9cc3baec205d8c88578ba047a13ce6d37","sha512":"6110e53f7110a74d3501074da159b6d2f393e6ce4543b5177a4f19dbcfca0ce11327283477b4f37116eb77a4132f75e6c8f16d42d156afb08dd5a20a47edc815","ssdeep":"1536:abjCBIUhMCcFwm4FK0s55ri7cDg0aaaTyqq24PoQUUvfKkf:2qhMCVmGR7wg0BaOPDTvf","tlshash":"5d5338078c0c8b56a46893a57e031eac7f156a0cadc239fe05231edb7ea57760d8d16f","first_seen":"2025-06-30T14:26:49.400463Z","last_seen":"2026-04-25T21:37:12.809375Z","times_seen":81,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/coins/TRX.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/coins/TRX.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1315\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHdPXgtlM9kjC4z1HtB%2FOTwOK0HqDbA82X8IW2FK6PNpqeQZFXLSLIGLM6fb3%2B4qRrycrcVKP3NIGLrTlUG9MvCzK38by%2FOy9vfS55VO%2B4Kj2t7RGO4X2l%2BeikRM3dIUIF7l1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49b123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-04-25T21:37:12.738967Z","times_seen":983,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-product-spot.55ab8b1a.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-product-spot.55ab8b1a.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 12070\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iaurAjGA0NKyBzPEqdYdry3WsEjZuhKJp5RMK5Gk1V%2BasRS9v7ZkzcDX841lTWvuxUNykcRNC5KLl1Fs4ege4KbP5KNIBQOkVQqBkI%2Fx7fxVQPVDnOjgoSdQltT%2FeQ7arMOh0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49b323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12070,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 211 x 202, 8-bit/color RGBA, non-interlaced","md5":"b0021ed3c2a83ef60d26544fea4fb5eb","sha1":"cd6e31b118e81c7c408a5fc5be00a9467e35ee02","sha256":"9548a016e904404565ebb9c3f743ea4e8332295409749c3228caee97f420466f","sha512":"e9682d3e6397f7c2a7d8d893323ce722c899cae4c2417c5576c1d90dbc471bbb9af25b8badc1e7ac0c33c5f821e1367f3d6b6ed182ca5097197346e66b99b0a8","ssdeep":"192:VtBBa/OGLISGwIAf2SKSAGkzc1HEs/nU0dAGk8VGgn8qdqQtMt:b2kSUAfxK6k9sddKd4w","tlshash":"8d42bee0b7a5c326368d95f80bc895ec4734e21ac424674f6b209b4d9ce58ce5e1c83a","first_seen":"2025-06-30T14:26:49.393005Z","last_seen":"2026-04-25T21:37:12.800808Z","times_seen":81,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-security.60d67960.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-security.60d67960.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 5669\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LTifpc7SIdfTtZCOF9EDur2U0Kyr68bDcXZk4%2FeP26slbeRMUdTNZyYgLar9XikG0PkixykjLFG1VmsiT%2FNtJelLsboNs8H1rwc5SimLbaxIOmdOKDQF7CRn8j%2FNED1h34GHuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f6610ddd223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5669,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"e4eaa11f2d34198c30119b0f52f1ad1f","sha1":"63187856313620dff0153cf3587963b3f3bc11bc","sha256":"47980e345af09739fd399c79e060971df53b51b6bcf608c9b54f3082e1975c04","sha512":"0b4104bfffdc6ca52b8a113eecd38c0171e7ec928bb02db68dbf98574fba2d6f48e2b835f536f799afb934c4bcd56fc955c42b8786c6e01015e5f838f52e07a2","ssdeep":"96:3AiyJgiu1BGfsPCQ87p+7hcAhWWt85sC+l334XteC14UrSYqpJVH4eNQ:3LyJgXBGfpH7p+jp8WC24XoCOpJYeNQ","tlshash":"b9c17cf03d41f0e3b3c6904bb9484006a293d48ac6dcf2c1b52a7193dba5a6a2668864","first_seen":"2025-06-30T14:26:49.375663Z","last_seen":"2026-04-25T21:37:12.795046Z","times_seen":78,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-licenses.15fdb7a3.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-licenses.15fdb7a3.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 3441\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7hCrLrPF48HqUhW6aPmnc%2BEjpRNRAhLZpoKaoEj%2F%2B%2Baozq3CY7zDQ4hc42LSe6GyyC%2Bg6J%2Btm4UFipVqbYa3JtviHUjGgnbGU%2F1VCrNhy5Ij1xVXimQ2uXvUZ2CTR14dI%2FtCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f6610ddeb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3441,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"e88efa048b378f49b6b1725b9300852d","sha1":"88f26369baa43df3bb2f0cfd4f008710fab269a6","sha256":"043aa560c2f8256f6ec58a0188f2b8f9e83dab1ac9b5d57dffe5dfaffd92bfc8","sha512":"2e156b8f05bed743fa8aee7a0cb459a06ca4f30360d7e9b38cbd371de7260c6384c62d99af8dc4d64eebda750c23be9170631396234aa05db49871e7a9c639bc","ssdeep":"","tlshash":"81615bd4e3f3e5684d9613f904bc77cbd438526c92dce830a3195c0d9668d8e64beaa3","first_seen":"2025-06-30T14:26:49.385532Z","last_seen":"2026-04-25T21:37:12.780255Z","times_seen":78,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1373\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 5dc0e4d0-f832-447b-9b2b-9130b0dda484\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: MzGQjvIbVOnWx01hxmfhJnAR2Q250AuW53m7W8fjm9NAzXeAbIVxww==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4254,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b1f50c567a7e965a3bbf5cc4d1003557","sha1":"c28f0ab704141aea75fac5401803095e8576b2e4","sha256":"470715f704e8f6691cb38fcd4644537981de519c76e4eca57b6bf89ef9eb717b","sha512":"8baa0391b2290b1069bc1820e2e76f99e1b4cc49b895d57d9783df9d1ed4cbb8baa2c37490c0147032990b3d6f32150235b030d6558913d46e2c09babff7b9aa","ssdeep":"96:dH+OL7R5yR43RNz9n4oeAFcLSS5RSCLTJxs:dH+ePthXnVb0Sa9xs","tlshash":"63915d61579087b5fe3b4d0927a5f8d19e7a30abeecb0de1a6d0373b58e10b20b18351","first_seen":"2026-03-27T15:24:20.495717Z","last_seen":"2026-03-27T15:24:20.495717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/cryptocurrencies.min.css","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/cryptocurrencies.min.css HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXk%2FwqwwTH5GD8rTYdzeMWlGqVSar2Mq0FDVooGq3rNhKSy0PS%2Ba5WGTFn1edkyjaeOHRipQRdUKIYYWngSL9OnYnMY%2FFRAUj834Tj5jw6ajaehejmkKHWxOCDNRbZBSUzHnyg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660aed8523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"c48d4626628ace5bfe1c0c64945d7ec7","sha1":"dbc863a5b7f966d07100a55f028d363a0b6d8d15","sha256":"2f474dfa8379ea5e0416c77f31ccbc764e26b278447ee59273e9783043597be8","sha512":"cb81d136b60c77b6997ebffa314c2ca19e073e816f43a3d1337195c6252726f65a4b6b5a7ba26a101e2bbd9431de3ef5d9e63288381cc772130c1e3eee35fd45","ssdeep":"","tlshash":"da71f02aa902a145831b5e5cbbfc07268d295433b90743fb75d2ac8d81d97446f722db","first_seen":"2025-06-23T06:39:13.01923Z","last_seen":"2026-04-25T21:37:12.784007Z","times_seen":96,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/chart.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.5.1\r\nx-jsd-version-type: version\r\netag: W/\"32e8a-y1VYFBBM+4v4jk0bIQM7SVw8Wnc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\nage: 21197\r\nx-served-by: cache-fra-etou8220052-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 71722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56990)","md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-04-27T03:40:14.992078Z","times_seen":3839,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/logo.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=6,i=?0\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9zQSuZOhS9%2FtMXxD693xKZ5BAWcx1KcDzbXySp%2BBQ7%2F1mZgw4gYBUkDxqdl2V7pqTpayFNE4DM9NnJAuF8Xwf2jFe7oJBaCm4t7i%2B9HLjmS3CzoB7CWnx1KPpz0fzEZNzWJcg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f66132d2e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8de8bf461d9961680647e78f69eac5ae","sha1":"cf5ea57c7f73e047b66a5199302eff1e958fc26e","sha256":"606375a97e3c2a44350ef2887d186d385e34bcf8e853c61c6dd547c7cc3b46b2","sha512":"1ea1093ea3a124a8322e0956d483aedea0f4d9924e737dbe03433b7df7e6882610e9c481dd533bd61f84343428ec84a1c3709bd942802a3d4519adcf7d399a72","ssdeep":"","tlshash":"fb21df6ed3185c3bf02bc36cd6f0801652a66149e6c9c7e5f7a8b71f6515ca31c29788","first_seen":"2024-12-06T22:27:57.075232Z","last_seen":"2026-04-09T20:03:33.946949Z","times_seen":219,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/2c41579cc59a1b71.css","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/2c41579cc59a1b71.css HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XumQLZmtKfj0oAQ7gNA%2BebnmNLBN31q4oHKxA%2FyB%2FLqSGBHcs%2F%2BmRCnQt1fIvqrko%2FXrnD%2Be0EDU9FYxGQnEKHJBAXd0sIdP38N45VMnLilmyeyc2p6qYG6xGoUcu0r6%2FAsLXg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660add7023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24727,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (24727), with no line terminators","md5":"c571a20c83adb269f19378d293e4f8af","sha1":"9928add86706caf7312c8208e01aae5ac8e68d2f","sha256":"af6b85926ee95926518d0ea5e45b563c4d414a44706bc61e23810dd9ff492766","sha512":"cecef0bcf2fcb13f37e376be4e5aeb48cf2fc8c67f0ec8ecd5bcbda7846facb5125f46f287751d3c7e5c489550ae59e7486bb16228ae57231932397347d3456b","ssdeep":"768:JnJrq7n9gIm78C3VSUqbeADUzTIomnYSEtwSYrcnH4P1JPU12LudrF3:V78C3VSUq6ADUzTIomnYSEtwSYrcnBx","tlshash":"56b2b38a8661613cfe676a30f8d946693104c855c673864ffe63b62ac9c53cf2274b3d","first_seen":"2025-06-30T14:26:49.360344Z","last_seen":"2026-04-25T21:37:12.802651Z","times_seen":79,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/header/market-cap.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/header/market-cap.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBYv9vVpur%2FmUar7t7318G%2Fp9wVFeH%2BBFyhp1hm4gG5MJBtHWc9Awooqns82BmB8GCNQgF9fb%2FAGMZ%2FTcGZ8w9%2BmqmlNSKpPU8ouZ5E3T%2BHQGGOCMk8VIHAIzesk8yXKnNnFPg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660afdb723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7b2ff8e89bb97a7d20a382fc15f25538","sha1":"08daba877d46e4e88d9831380c5b0a5c6dd52bac","sha256":"61987960093cd56ae16730c31b394789b6c2c28059097a2a4c8d17748a408f22","sha512":"f4e0544203485593cc6d699798bbf81f6472da6b624ff037fd2549739589f5221b8298c9dedbd30dd10fc4667293d490e1cc1762f5b0e8485ec6643ef8abcc9f","ssdeep":"","tlshash":"f74152e80765473e5658eb015aba4f4974206092bf62018cf36e3d1bbbd2e9b248cd65","first_seen":"2025-06-30T14:26:49.370438Z","last_seen":"2026-04-25T21:37:12.78155Z","times_seen":113,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 10:17:38 GMT\r\nexpires: Fri, 26 Mar 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 104773\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-27T04:09:43.184306Z","times_seen":101104,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":122,"dns":0,"connect":48,"send":0,"wait":15,"receive":21,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1235\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 8758b8cc-acef-49f4-ba81-83b4ea087173\r\nx-mbx-used-weight: 10\r\nx-mbx-used-weight-1m: 10\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: bQMZk0OiX0PbSJ5BkuF7W-Pt1uq_h2lgLmDXwz6E4nP4OOAsGiHBJg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4041,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9644170ae3068cd7d9a57ed91916fc87","sha1":"fa2cb4d3373a340ea9e3b39effea5b30ad738bf0","sha256":"f3a7659842e153125e43c24b178d799607166b3ee9b12a7561e07458f7fa3307","sha512":"3b01bcbf17899c386c2a17417fb453d456f2db6b0f0b90c37395f75c18c5c379cebf78efd3175c718ef6db64ac03df40e998775e5227dc4e238f7efa26f6d22a","ssdeep":"","tlshash":"5d818e50168d86bcfa374d052391b9695afe306fbdcb1fc0a5a5392778f20b26708f15","first_seen":"2026-03-27T15:24:20.500693Z","last_seen":"2026-03-27T15:24:20.500693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T15:23:50.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nset-cookie: JSESSIONID=83E588965EE4EF0C798043D83F642011; Path=/; HttpOnly\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ge3rBKO4PcwsQiG3BZf%2FVmiAzjtZBqj4W6MYxUQDI7o8IG24hVF8VDLNUqw3f87Lkovu62kN86P6nN%2BaFL8FZGCrd59LDPZZYPCThheiPeMQ67NVylF59i%2FRNbt8xFxDHNmyLg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f6608c8e71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":474392,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5511)","md5":"a39ab317719352818d01d41919ca1550","sha1":"f5b1bf62cf770f7955096abde04a08d07e8feb67","sha256":"081ebeb751d37c19be8620a7c2a3f4d6820884af628ed31cf0c518a6f840a145","sha512":"10a433c2efab1cb2aeb3b6da91daccbcd200b82632b1887978d29eff68b69c3157ef04d08341863cd9de44cd4a6952d56cc6a8095338bb32235e828f42f5fc62","ssdeep":"12288:9wJvUCcbIz24w24LijHOWJSuyX8svBhphujhYdN4CFKM/rD:z","tlshash":"86a45b6063f11259b003c3a88bf95a263667e893e902c65877ec1dd0dfc799e9d9324f","first_seen":"2026-03-27T15:24:20.50255Z","last_seen":"2026-03-27T15:24:20.50255Z","times_seen":1,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":53,"dns":36,"connect":1,"send":0,"wait":119,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/fc74fa5d8eedd6f5.css","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/fc74fa5d8eedd6f5.css HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rLm8IEhPFs6i00Qx0%2FVbcEtZABCyHyPcL11rgU0j1iZojIWfu6JergOjgyjK5%2BkR5oa9uqRgX3eOZ2S%2Fi0J4jORvEVao4lSv8uYvddPalELeEgcHZIuJAih2ho0c44%2FJVQDtA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660add6d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201886,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"71cf8e7d846191a01d4ab42b2863428e","sha1":"414cc9bb8744def9526b16abf5109e1b4b2acf1a","sha256":"63133e7838be988e2653b299683fc411ffdb2eb0e7d9092876d4629d518dfb7d","sha512":"db1b147735317b7f9374c02e55a473f515bd33fb472da4413e7cd317b255b3394d8e820f7858af54882dfebe1daee00c0cf8138a01aa7a4e290ba6c2a7a4ee60","ssdeep":"768:yp8XqojIChhJdO9GJbUTAXu+hMDqpoFzJGSy/qzqwGNlcM1/CqEjlXB9Vxu6g4LX:OXCRHSyColcMYqK7DGr/0+q","tlshash":"e7141d4c481314070a7b8b3b7a92575afb9a10737a26dc577aec2c818f7917c90d2e6f","first_seen":"2025-06-30T14:26:49.344609Z","last_seen":"2026-04-25T21:37:12.790571Z","times_seen":79,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/c5fdf5e30258f13c.css","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/c5fdf5e30258f13c.css HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80GLWq0aNs1RrMfVrgS6qc%2B%2BhZEOUeweQHHL3sbFhkn3FupuxMrmw0kxqeNKjHYIRAJbRIOZQLKZA3xx2I4yg57lobBgy%2FvWGt%2B7AV7ZAFNzGNV%2FPngaCaYAd2B75eisZKTsPA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660aed9623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111103,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"a08a45188b4ed8e0bf9f95748a91f476","sha1":"b72090cbeaa30811078d22c015b7b96dedc45cb5","sha256":"60e8ba22182fa49114bf534f1c7d1fbbce1b10fc5448f1d1f17c7f59a06b95af","sha512":"30d985d11ecfb3f3ecb401c6d4ff3cb530899d8d3be95743c6e9f87abdb3d2f0934d04003d29fd57060719f229784c37dea48dde991515a6c2699df02d6b3476","ssdeep":"768:n1JEn/Jjq/JX6IPX9NbcOgScYyjcCLXz0/IUZAJnQFSqaKupqiMxKu0846iN1:n1JEn/Jjq/JX6IXQZxqiMD4X","tlshash":"d8b322118609915ba1778b7c1ba50e00eacb6a73960366f8fecc31888ff9154939cfdd","first_seen":"2025-06-30T14:26:49.411184Z","last_seen":"2026-04-25T21:37:12.79586Z","times_seen":79,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/6.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/6.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 70442\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0x02HRkFyr9q5NXcn3Hlk8pzR6%2BCh5mj8vLejhsGJixChM0oidtxvxX1mkYcL9DrOe9QzlOyKL80%2Fa%2BqciQczDWBv3%2F%2FVhQ5VHE2WGTrIfLk1zZ2RYKY%2FcrTVvzMHdXlniMnjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660bd85423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70442,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"cfe680c2f83e044649ecdea47c402578","sha1":"006d21087250a5f1599f0e8a1daa3a1215cd99f1","sha256":"13b56d437f4033933469e293cf44a8df7d5402472ad6dcae4e1bce890b347cab","sha512":"de35dc3524c9c851558baa2278ea0904e46ff0837a942f2c7928958d3d42ba9a4bfaa64f279d8ae69b97990d441dd6fc2a5563efcc2d1b17f89c53a4de84be98","ssdeep":"1536:acXLGP4zeS5JQBa7fStU4PATBPzKHQNywIVoePdYlQ3Z:t7qSbQBaQDARU9wfePP","tlshash":"d96339175d0a9b97506c83d9be530ead2f0a6b1c98c63aef00230e8b3f657760c5e45e","first_seen":"2025-06-30T14:26:49.387451Z","last_seen":"2026-04-25T21:37:12.785716Z","times_seen":81,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/untitled-app-modal.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/untitled-app-modal.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 9947\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mU65VSnWzoqkJcfp4jRhGkjon%2Fj%2BKQH7U4sevXslOqKDc6ClqYWQg2%2FruvnKeB2DP4wygNRWhHd72qDj%2FDmpRCYJwulOmDCw%2F1MkjtHXES9sJUAB9YNu5U3RPtxI8EZdkal88A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660cdb2b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9947,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 345 x 252, 8-bit colormap, non-interlaced","md5":"5559668af3e553fc871a55adf3347819","sha1":"4a699964c855c8f83c2610de0af2419a71257c8c","sha256":"8ac5dfb6306149a3edebaf77bc100de9ffa8af46e56b8bc79716fc701e207617","sha512":"e0edab55aac4f8d743e98bbb7d52ed7c5b1f5b32c84e8cc271015c10d57333c2b458f30b4eb5e41e0c7e91b02dd46a8cf30b9653a3e932949413f85021485967","ssdeep":"96:JHrmqk0gW4mwLtat2J2wx1Q4Hs3NGlGzribeTnSodQNDirGQ0rNpV6x/ddcEoSa8:JHrmqk6QoqeTSoao4pVCdHahAob+8RLE","tlshash":"3b225ba49f9578c0975e1e73b5e5004548330ae7cdc2bd4abdce542a0f28b819f2b9d7","first_seen":"2024-12-06T22:27:57.026807Z","last_seen":"2026-04-25T21:37:12.73716Z","times_seen":382,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1456\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 83da6e2a-622a-4d76-ba2f-f5e7b2c8a83d\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 1brSA8hxV4li-TURASPkK_5IG7WXWvWGuvCUe9NvqXBBYd_7K5xQoQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4309,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4856be8974d77204f1dd4f3773403dc6","sha1":"3ab12a7c216afe7b6d9615b0f03f8efe13ada0e5","sha256":"89f967d6ef201ac5c5171c3aeac396ab2f0cd87715b98069f74fe94ac512ec11","sha512":"57d43a972fbae89cdbe8c40a40dbd07afdeff2e4a543e8fe66c152773f5e1cb813310fd2fa3eaeff3b0158fc72c278b3ca968dd8f92e682bac3d82a3e9b08aef","ssdeep":"96:eYGsKoeFxslPWkYUqNjL8qh+2rNfBb491FnCCbHA:e5sexslekYB8qhxN4dnCj","tlshash":"ba91b0a5177583a0fe3a8d0d37e6b9e52d6b305b9dcf0dc069d1363b98e12b21b08306","first_seen":"2026-03-27T15:24:20.509124Z","last_seen":"2026-03-27T15:24:20.509124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/coins/DOGE.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/coins/DOGE.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2808\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hkw%2Bxy%2BrcsC8ZT9GuE3BHN9kGBDIcB6TqgvaS2pOQqrdIjnCeTe7oLNenIpzHd%2F4nVxmOfRBbjgL0rKxOyz2uVD7Uj9ucEYxmJ242uYTT9aiaG2hnBL2xodiwgU51Iho0InfXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49aa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-04-25T21:37:12.736542Z","times_seen":865,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 27 Mar 2026 15:23:51 GMT\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-04-27T04:36:16.347242Z","times_seen":1201,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":235,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/header/p2p.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/header/p2p.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 5440\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNMhIz2%2FJET9%2FqvMj3mjAQKgHADqFG1z4btw3XAyQLCKcpir%2BCyhAcePiA%2BoFVVlHBXTQnL47mDvlhC3oyTLpXcH%2FUql3vWbr0yO6g0RU45edCsSZYLBSDDEemMM%2BgGYjzKA5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660b0dd123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"ecf394d33dfc28501d3f92f99d490660","sha1":"0a51f4e56a04e40a05eae931cd68d86750a2c43e","sha256":"e003384304ceacbe2ab8f0abdf2ef74e1c8fc3b2a58c93a43d46afc0c3499eca","sha512":"c7489bf8a174dd7b4ee4ac736be0384eaf9a8601e60f777faa9d6c8803967400e579dcf81536182ddd4535667f252c5818038c9c2270c768f937c0d6eb66d42a","ssdeep":"96:+cVYcgk0I8QIMIat2wU9bmdT5DdlBa6hUGDN:wcgkrMa7HBaqZ","tlshash":"62b1d91ef92231d0224dae7725ec61155f3381979a81ac94f9cf48521f142ab1c9b6fe","first_seen":"2025-02-15T17:58:10.485235Z","last_seen":"2026-04-25T21:37:12.768541Z","times_seen":376,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/2.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/2.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 69942\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5xRLSDT6LT7Eri7J3a2BLNwAp%2BRchJXn5GfwHDqY725aFKOoB3mPfutZiodEmLk1rXVzsMJR8X6nnRqIpwcOkCoCUr0mCRSVCoBj4nPpC4oT4B8JKpWFlsM8fodXDU%2B669e1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660bd83f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69942,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"4c50c8bdf56c727bf40642b2901b12a4","sha1":"58ef81f8d380535029ac9fdc5a0edc63e1f08a31","sha256":"31886ad9efcbdcfd8ad41e37d22b16e3c305eaca70e6f686a4a738ab59982ae1","sha512":"a269cccfa3aecdef2130c2ae2b45fbaf4cc521f0b478bdd632f4af8e7afcb9d0919b019151bcb34d30836fb03871690b3acec69dd65e3efc85296a99ed8b83ca","ssdeep":"1536:aaDU/M+3dn/S7qZWLbalPa0ZDqXsTDdLUHyT0xLVKfAvPrcFj3vY:tgd+qWbgzsXsBUySAjs","tlshash":"2a6348178d09db57856993e86e139e2c6f0b2b9c68d222ee00670c4f7eb83714dde51e","first_seen":"2025-06-30T14:26:49.342555Z","last_seen":"2026-04-25T21:37:12.799941Z","times_seen":81,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/11.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/11.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 76874\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9FT6%2FcOEutN%2FnNJKN3cohAwGluLgCg5%2BdznMDskgJ9DoIYjXM5L1%2FitUtF7DBUcVjpsdSlSHI3dwV3m1Hm8bpiNRNwihxRtMR2eWbKj%2FunKL4xwZ5CQ4bPG04bFYuQcgHM2gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660be87423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76874,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"eaa0d5d60c214fb0991eb90df8087673","sha1":"5019424950b4fcbdeb0790c2adad392c1d2751bc","sha256":"4d7fd384905307eb70f2aa61eea672f620733a30dffdbde8f6df547906ac5d81","sha512":"4089fb75ae054b2a1ef4ccf60d9f3b6d4b4afabcd6dd9e1497a259ce05d54c58147840b728b11d01129ed918422cf75d3db4ca0b1046ddb65605c11ba694fb7e","ssdeep":"1536:aq5T8zttpyb3byCTDD+9HsqCvutsQF0wlEfKCXjorQogSu1:H5kSb3tTDy9MMFflEfKCehgSU","tlshash":"9a735a5398059b539568a3e97e435e6c1f0b6b1ca8c23aef10734dcb7e687364c8e12d","first_seen":"2025-06-30T14:26:49.358136Z","last_seen":"2026-04-25T21:37:12.817657Z","times_seen":81,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/coins/BNB.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/coins/BNB.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 2560\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8GGrJ5DZXPM0glbVMEbVqEtiSpA11xoHVgAMBi1mXQ3Qw5PVFHIW8%2B3muLrj52D53EFlE2o1uYhsdzjIzp1eRehqCUjXrmgu6Hxi%2FgGKkVVmpZjgClf8zEIcY8noInb7IcXwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c399d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-04-25T21:37:12.816325Z","times_seen":1427,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/coins/XRP.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/coins/XRP.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 953\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lsqjBZ%2FSzwRoOrZ8H06nQrRHia3aVCF9Grmztg0NNQMxwR5r0gQbbmJMyVT94VpLWXqjtNxhAxvTz7ikQHIoAndybyHRZGx%2BU1JO101yU%2FTNColPkj81rZ%2Fgr0NWKQmu3%2BXAng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49a623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-04-26T05:18:32.656819Z","times_seen":1442,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/9.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/9.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 85498\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kvh4o0IBCOKIFkZYQpfYU8LZ4p1Hv8qMnUHLlI%2FH%2FU1XmcbsuCE%2FBrYw6cjkEsZoy%2BwkkQ79jPu5mkSoqC98qG9uTwXw%2FhFIkChAxo6N2n1EkbyQ%2Be5T14T8C7zdxJzANJ7VPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660be86923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85498,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"19baa07970e9e8c01ef748cd443bc631","sha1":"8dd4a6a845a45d838013b21d5bdff204aa6219d6","sha256":"f5fbf68c6230e19753027f4faaf4a7fdecbdbd6eea57b4ae37a7f94f833aa51d","sha512":"6029444d20ef89b9521c7b5f413d13019b2064fcd68b2a2390b754cfa19664247554652f84f1dfcd9d3390dd238569c3e605b0dbeb03e2fc430c8d0b90ea66c1","ssdeep":"1536:aDeSAD5Oy6W1U5OO7pMKfrzm3DDUzd3v2emfe4nAXDs:We7DIWK5tprD63W8embAXA","tlshash":"b5837b578818d793a16d93e8bd534e692f17270ca4d636ee01234e8f7e98b720ccd16e","first_seen":"2025-06-30T14:26:49.363006Z","last_seen":"2026-04-25T21:37:12.78655Z","times_seen":81,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/coins/TON.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/coins/TON.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 24181\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t72VrEe5ZqYUpNIS%2Fcj83C6C79FDL6jrdeUnJrmDzQ7T18tmiVdA%2BWL%2F8P9T0lFot%2Fspj%2F6%2FVcpDFjgyewsauVN1BNDVyjt%2FZUsFwJ7HQR0fvRkRocG8UhPWYRH6hFBcNmMH%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49ae23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24181,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1e864e18e2e3a14b3407889b0e7fb1d4","sha1":"6498cdc01f17a9c51007bedb1eed9e28ef98bd90","sha256":"d8ffe78edcfb9ad030ef0f932ea5a25c89acab7c11d6cf03b32cd4913de14053","sha512":"5b0555db16debaafbad44fb6e10cd8f3ee414c8bd272ba47734fcdb44b32a5828cc0776c43dfea0c40c81d9718ebbee8d9f3fbfca17f08a5e45e193cb9497f31","ssdeep":"384:WU5AJju7MoJSV2L783TGNX2H3PLIE0eq8x343eNZCPkArJTMUno/JBWRCrasz5Px:/AA7MoUV2P83TGNGH3PLIE0t8+ONYP4F","tlshash":"40b2e128d57e8291b694f1b827cb5c8f0f738cd23c711e50ee550ea0a7922651cefa0e","first_seen":"2024-12-04T15:05:15.931067Z","last_seen":"2026-04-25T21:37:12.798555Z","times_seen":446,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-verify-account.4b1ffa0d.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-verify-account.4b1ffa0d.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 23634\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6oQWo8vO16LQKu1IzOlqwG%2FqEBIopf8wp3H27MqqsgvHo%2B8TUuwqhVKBIyQlWjl%2B35qrjw0QrohRib5FpYMLBdU%2B6sApIv381EmVjSY2pMwsvXtKxruYntX5QM4vAO%2FPGlScGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49c223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23634,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 570 x 440, 8-bit/color RGBA, non-interlaced","md5":"272b85a0c0a7030abba33f10b9569dac","sha1":"cc34c7eb120829198f94e7d87a0550537ff4187e","sha256":"af20338ef34fe18ede115c6b9aa5e1292639165e175e8652b22de304e7cb05db","sha512":"3f67c1db68929b273006c8c579f1d9b2db30a1d726b03be08eabcd89761276fa2bf3f5847563206faf05fea402e5c64e6c9f5cbca07bef2a5b22de77c9e0a84c","ssdeep":"384:6cnhYzGwLBEMTgCNHaYKHQIWKdxD4GIp4VVTNpFeN2sfGn4vvD/T/6UUf7cFtcCQ:6ggDEMTgAHaFwIWKdxD4G1VxptySUUDv","tlshash":"6db2e16c10c0349bc67f694a5d8c2b3e39afddb63cf5ca29d0a7299806314244f6e933","first_seen":"2025-06-30T14:26:49.348642Z","last_seen":"2026-04-25T21:37:12.812236Z","times_seen":81,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/api/getLocale?v=2\u0026lang=en","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /api/getLocale?v=2\u0026lang=en HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: lang=en; Path=/; SameSite=Lax\r\ncache-control: max-age=10800, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N508pWK7UsQeoU25l5jsR6QH6RSCXSsyIDBe1Li3aYQZiz%2FPmOCKCR4yLOGKfN6s8f%2FG5VYcqA7CzjebpVp5lAA5DPlsKovTAtQ%2BiQzyrjSxuBWcGQ0I1Oi7f3BohdNL4NUZLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f66108d0123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86579,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"36b0ad2a4eed0230e4bc03331711f38c","sha1":"cc2f38c0b5b77917314955cd31b676c59137af4c","sha256":"0368fd5155ce403a6dd83c188f1cd74389034e2b344770a6760c6022bb8b7227","sha512":"0778a836751511c1ffca33f7ee7ffdea35ad73ff74f71e9ed956998577bff724dc755de4d3151b9365938acaa9e9fa1bf88a8e3830efd9ec8731c680a08a9378","ssdeep":"1536:Tx9dI8XPwE4MmEFG4+0c+VVSbCliDs1seF:Tx93XPd4Mlw40+VVSGiDs1P","tlshash":"cc83f90b991e3d720bc613d1bcee5ddc71bd024091e1906a5aee84ac16edfc9c2e7897","first_seen":"2026-03-27T15:07:52.726029Z","last_seen":"2026-03-27T15:24:20.524239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1241\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f558e078-3bf0-4cac-9da9-426a819672a0\r\nx-mbx-used-weight: 6\r\nx-mbx-used-weight-1m: 6\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: jsZ7XufrrYgnQ5l4iegswQ2GdR1TO9bBLvgAdku1pWd7zX5p06rkfw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4074,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7890c6f3d84ab22fa2e1b8e2bd38a10c","sha1":"0ef5715ae1b6dd652366d5730ee0aa0f6e2e6e27","sha256":"620f4b25c4a2fe1db5de283bb27a8b5ade18724d7faf7b2250843f2cedab9d93","sha512":"3bcaa526f74ace6057bfdadd87ee98f0a7d37b1068b38784554f9eabf182ae7184c7b4745e4964f9c3e02a310aea6daac2edb94b301371a55e391086bb283546","ssdeep":"","tlshash":"f98107151bf082a4fa368c0827d2fca11e2bb4abbedf2ce055d079ab5cf11b65748705","first_seen":"2026-03-27T15:24:20.526007Z","last_seen":"2026-03-27T15:24:20.526007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1128\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 1c2d1a2e-0c6c-4404-acde-f5774dd963ff\r\nx-mbx-used-weight: 14\r\nx-mbx-used-weight-1m: 14\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: DKhAEYZaDfS-CbA6VIaJ17E9MMHVGWG3qJsKW0bJ9oF6RatQz2knVQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3890,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d27c2f922ebc21aa276d8399766c09a3","sha1":"c7aa847f06c3ae7532217b3339f1a2a9d6464b0c","sha256":"f003f9c834a66b995e8d15f15670c1621ee49d667e343f2b7d2e79b330ac8afe","sha512":"8b490b4b3f256db88dc180ab5f38ea2b56b18557fdf7e0db15d3899706089b92309d45125ceb441a53b3880d1f73fe0523456b4253b6d2035dcee1b3f75b82a7","ssdeep":"","tlshash":"ad81af11269882b0fd3b491d3392f9a5496b71abadcf1fc0a9e1392b38f41f21718f11","first_seen":"2026-03-27T15:24:20.529528Z","last_seen":"2026-03-27T15:24:20.529528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/header/card2.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/header/card2.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 4528\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZDgBuC%2FnwGGvOon%2F5vjmqdDPQ82uslUOIjIHkPtdTndlH5ZAAu2OSioR88JiUZHupKhUtxskc2vkV%2Fv%2Bg3Jqm%2F9B1sIHHXArEqxlTEZACe%2FgEsA5d1UButo48OBrjPRquBYrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660afda523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"787d17f49cc145d078cec3f38989b144","sha1":"8bb854fe7462d3ddc152b958232a952888a14c3f","sha256":"c38f9a1f91724365b80b233a5ddc5b891216bf82bb05f7be521fc2e75bd3cf37","sha512":"8ab4bb5374d3d7133892ba81959d0a0cf9c3adc05328d644b2ef326e602907c6988dd9b1588cb18e595583458628e130943ed8b53d70d13dde7c03fcde4f6ed1","ssdeep":"48:+MvnJralQqxKPbGf3k0IJN5IloAhat2wxrYCrW3ETb92jw1M:ZvnJWlHAjck0IJ7Ifat2wpYkbb92jwm","tlshash":"7891cc06da5235c1664ea9b711d503596c334153cdc19c5cb4cd8829af303e91e6ebdf","first_seen":"2025-02-15T17:58:10.483843Z","last_seen":"2026-04-25T21:37:12.811265Z","times_seen":376,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/header/heat-map.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/header/heat-map.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cgonw%2FrSMcA2fyi3HlV8E%2B2Ac97Hi1kh%2FEHlxK1mgEH%2FYoHjTal8XaY1sV3uAS1W0I1Ygi5snXcAiluhDrEjHnUQRSc1WuqCqHiMZ0phkdThnB8ftuwQnzXJ3YkrlLeRbbKPBQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660afdbe23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"16852ba4bfe972606e98728eee8b1f55","sha1":"7f99153c01c571dbd8fe8c27fac5c96bc67d49da","sha256":"92f2e89e2e124f61c1eff8695ff4fe2e5b7448a5e95ec0c2770100c0234d52e2","sha512":"d6ab0d87d30ec3a061755b1ad0b0cc752e6fdeb4b2becd5a28d41a57031f0dcfeae6330c8616a8d61e87bb041722aad955523728aaa2843b3630a52ef6196c7d","ssdeep":"","tlshash":"c841b8e5573985790b18d72c5a7a7a0a1ef214d7667084acfb2e283a3743dd310c0f98","first_seen":"2025-06-30T14:26:49.403614Z","last_seen":"2026-04-25T21:37:12.792348Z","times_seen":113,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/coins/SOL.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/coins/SOL.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 404\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VAxW%2Fl3TiHEG%2FDxTE3xjeT%2BUtlnwWI%2FSnXO3l%2FfpJl7C%2FCbcKS0ZV%2FYpYRDTsP7wj03fURqsLXvusbQRuhiDjGHKygMhc1JrC5VrHUvgXC1JX1vXt0MHfRJfOE4EZb3Fb%2BV%2Fyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49a123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-04-25T21:37:12.788288Z","times_seen":886,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-to-deposit.9eec1271.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-to-deposit.9eec1271.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 15968\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=maJVo204c8hva5Yw3tELSrJcSQHJJANC2HPMN4i16Nwv1xp0%2F4wYXDPKG%2FohTMyt1f5ulAqss2k5AsrE1LUxWo7ehzdud00aXFJInBQxrR5o8qZIcwYIycXrDUAB9k6qCMX7%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c59c523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15968,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 380 x 281, 8-bit/color RGBA, non-interlaced","md5":"bc6de78c20922b83dae5d98f1ea5ebb1","sha1":"efb206b80c530fc67b9ad32224291bd5d2fbe2aa","sha256":"a6fd985f064c4fcf02fde396a2cf0a20ea622349d5a82ea01b57ef3ccc70a441","sha512":"225219ca69771b44f7afda35c13c7420372327cc7d5dd057956ee2332f6cfd5c0a3675c8e8f9f78954f0b513af0b9d828944c808a4f8bc1d03007c2d7d0b9812","ssdeep":"384:/0QP1Z9hcUg7lqWnanR9OuM3C21FD4LexPq/NmLPAxtxPDjP+:pZ/chxqNsuM3C21N4YwNzPjm","tlshash":"0a62d0c0749175a637347dccda062de048db1739136fa91e773e36a880248276ba9797","first_seen":"2025-06-30T14:26:49.413366Z","last_seen":"2026-04-25T21:37:12.782138Z","times_seen":81,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1176\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 8d89fb50-85c8-449e-9d74-52a23641e05f\r\nx-mbx-used-weight: 16\r\nx-mbx-used-weight-1m: 16\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: oaF-sfqQa2BYDhI4Ncf0KWsLjRqV3Te_4CRB6HUre9kyaIudrt1iKQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4036,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"103d3b7c8b223a549d519480d901272d","sha1":"22e5c60de854661b6bc3fd552279f39b1411e63d","sha256":"8ffb1fc3f5aaebf4c111cbaefecaab0d9178009973579c821f7ffde76d7f0a40","sha512":"1db4eec3ad31661240db41b8458dd1eb869529b7fcf424790424f83ff52e6ace20c53e6af5252c09eaf50b5032d86089167fabd192304de6e5495a21a64fff13","ssdeep":"","tlshash":"f581e3a02f9047f4f9f64d09e7a5fa96296a345bedca4fc459e3362f18a13721708f01","first_seen":"2026-03-27T15:24:20.536073Z","last_seen":"2026-03-27T15:24:20.536073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/header/technical-analysis.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/header/technical-analysis.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRt%2FROwbM9xQrC6%2B2FLFUtGGP0uTHJp%2Bo4WflFAywh3urNkcQVUOGNLQsXAhTSguI0cGei%2FpWLjDbF%2FHbmWzBDwIYaCj7UIC6J7W%2BxU%2BddYnJYk3Qj1t3brkZIUGC4uNFDrW%2FQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660afdc223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4cc28862b6416e60ba997d56c9a0c458","sha1":"96ddff9441ccd01b2ecb19802f2876382212d930","sha256":"e1d29d93771f480610f8a75c35f3aae9d0ed536342fb62bb86dc1461e10e6b2f","sha512":"29577fc1da20133cd20a2e4737ba6c63579c28e690905dd5049fb1f81c658347fb0fb20ce63a2cbaadd0a376007a7ee5f98144fcbe8372e7c3d2b462cd4e6fae","ssdeep":"96:+kUAfxrpn/Blg7arcU7pV7M3qIkLmgKGhbmnJRiUDDVod96:3UgxrbqOoq3KGqfDhoH6","tlshash":"6fa1738b033cc2f877d8642899723642367254bf5678a108f3bfb8263747f652255d58","first_seen":"2025-06-30T14:26:49.397587Z","last_seen":"2026-04-25T21:37:12.797693Z","times_seen":113,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/chat.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/chat.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yH4fi9CcgL5o9BMuGKZi0vBZ%2Bh1vFXgSpJtSkjimttZXKYX7ful%2B05QKLoSmz%2BlRWGgAZ8RxGxuk7YSN6tWoEUH3DGMR7YPG4IAfGr1ot3i9BgLCkIB3bAVz1b8jSCgLQ9V99Q%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660ccafe23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"856a385d230e560529fe4f70a442cea9","sha1":"c9669d3c47705149e26efd24e0d3ed738fc03069","sha256":"c2b05ce3c22fd9b07bc627c2ace70217eb0e3dc2183d9d4aa58bd482dcd8d7d5","sha512":"10308be3d10aa5ea28b1c8a026b6008c530aea11658680ca9b54af0e06e4f7e7d7b1831326d13cc915f83bbc4d1e8b5e67e630a42b8bb898c713875ee3fb2959","ssdeep":"","tlshash":"fd2168e66fec96a6d35e833063f41fa62b4730bdb6408d5f8680dfb0db051aa4144ad8","first_seen":"2025-02-15T17:58:10.491189Z","last_seen":"2026-04-25T21:37:12.776721Z","times_seen":473,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/cryptocurrencies.min.js","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/cryptocurrencies.min.js HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBySP5cyb6vxdQLqlrIL%2B3MevSGqBmjatNXchUD9Q26VRDHssd6nAhnvbDjMX2pb%2FuYZvVhylC9B7LGLKKI1qwe2NkvngqKT9s0Tk4EY%2FFUSkm1k6nx5ES1NUkGxrNvsDoZrbg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660cdb3123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":749,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (749), with no line terminators","md5":"37257948808f476a1ff0737b2a22c9fe","sha1":"736ae1b7c5597458834c9704571b99bd45aa6231","sha256":"f6af42497aae5f14a17aa2d68c0ae2d551332e96f2efb23a428cdecff879c2b3","sha512":"3f5dcd87cf322f465879172c431b73e02eff51eec9eb4ed39ea29364fe8953577ddd8119434456b873ffa81e2d73c5376621d6b53a37e4ac0f98c9342d5cf440","ssdeep":"","tlshash":"7801b56b394e343555ce21bf42769a8c20aa013c754266e13e2a898c6071ca2f4aa9ec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-04-25T21:37:12.813045Z","times_seen":241,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\nage: 2837191\r\nx-served-by: cache-lga21978-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 237385\r\nx-timer: S1774625031.969547,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-27T04:07:52.727565Z","times_seen":144951,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":54,"dns":4,"connect":27,"send":0,"wait":27,"receive":8,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/13.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/13.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 64756\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Jy82mo%2Fv6cECMqAQGZEKyX78ZarvLFaVJOwY7sW1JYLLQggrBF%2BU0vsCOriP%2FX9cZrzQlRVED5KhhLs1llMc0nIIKtclg6wwFS704LwVih9YwPIKn6BaX6r4L5tO7g8qZUlVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660be88c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64756,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"97515bf5411c5c014a52facdb1029848","sha1":"34fd4233a84afe14b0a723afda643c1abc850ab1","sha256":"f674c339a3e2a1ccfd846e7fe37a6444972531b98c96ed825e99bc4408302866","sha512":"c339f2537e656db39d0663759d6c08487c1d222cf58402bcc01e9127b82298302511ff9d40ab62b593f6ae236bd754e21f77f55dc0607ef3a491957f113b4b24","ssdeep":"1536:azce555NUKp0DUqI7lVUQkRZHpTFcKK4kAusQ:kcgv0DUvlVUQkDHpxcKpCd","tlshash":"88534913980897d2a06c42d4bd4b5ecc2f52ab2ce5d12def06134f9b7aa9373189d13e","first_seen":"2025-06-19T20:02:29.516298Z","last_seen":"2026-04-25T21:37:12.776219Z","times_seen":103,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/coins/BTC.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/coins/BTC.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1125\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEuAReSYkLm2HOWObb7VToQvY9WTzLDPRoAtFsOdE4qywOAu9a9B3iUis3uqhL4he6Ec%2FzAl8yGouOocwLcWCW8F9xFfxaqDYq%2FKQBMpQFAYYqnYDomzw6P6E4vVLhW2uhv8Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660bf89d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-04-26T05:18:32.654805Z","times_seen":1550,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-product-copy-trading.2edd80c5.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-product-copy-trading.2edd80c5.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 9983\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXPsHM6p0qVU%2FmoQL%2F1iqm22ejlpSLFjAhrKQF0KnIMlRTt97gVaK%2Bh0LMsGKy4UO9x3Nl6aTBJBikVTlxsBF3tWoVHTW68RG2tpVlcnvzS0GEj26%2BHvszJuVdcPfh%2Bq57vk6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49bc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9983,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 285 x 154, 8-bit/color RGBA, non-interlaced","md5":"995c6237ef908602463b177f2c7e89b8","sha1":"e6c28ae4f03286f7ed6871f453fde91a52258bf4","sha256":"64310a7cc0e813fdee382f39b532709e63bb2d8d0efb0b76c0689d064b8afecd","sha512":"793c172790b28ebb2aa93ca0c6002842af5599e87aa5912df840ca86e310e36d7bf38705c60586900ed74260a5974fdce95c1d8c9f6f966319af26baaa69f68f","ssdeep":"192:Jkdhm1qEwbAG56gj+DNl+6xqzzXc0vs7yOKUwZpjAe0coXG8QCs1re1souBR3B:udhGwbR6imNhxq3c0LRflxe17Q","tlshash":"2122bed2b6f641b2883205d4da1e04b7a67ab0d22036dd1fe224b8f3063fd49b48d8f4","first_seen":"2025-06-30T14:26:49.40483Z","last_seen":"2026-04-25T21:37:12.774527Z","times_seen":81,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-trade-us.17c69a08.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-trade-us.17c69a08.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 8593\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsKzPIEzt5sqODkwEQpT05qKovXBjYG%2BdIeszr09dGnzWJaD1ngfdmnxamAnxlZx0GewwaxKohiN2%2FEVfh1fZVgvkVop9W34PUvXul1xJ4e%2FtRADd3GZONAhyMqC3880YnIrCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c59cc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8593,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 352 x 291, 8-bit/color RGBA, non-interlaced","md5":"79da6ea5eb9245bd777dfaef672a4c49","sha1":"598052eeef651426614d96e9db610810a215533a","sha256":"3bc5face37504613009afe3d1fec33333cb83011273766e14b96c3bdc40526d3","sha512":"04ee6dc01180ff02f6b98d40704b3f53d2cf3e690d994acf1968f4b4aa66da59758714589874e023676abda4297867e562c4a44a017eb07f3310a91c70e66ea4","ssdeep":"192:yMlMkjn4HU8SiZ39LJ+XDjoihr64yP/KfoAvHHHHHHHHHHHHHHHHHHHHHHHHHHHz:yMlMDHUAZt0XDjVhdLfnvHHHHHHHHHHT","tlshash":"15027d8422678c2cc42bb5b9687249cd3df429ee53fe586710ef2541567c1a06bd4e73","first_seen":"2025-06-30T14:26:49.409171Z","last_seen":"2026-04-25T21:37:12.810198Z","times_seen":81,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/0bc386c2ced4fd85.css","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/0bc386c2ced4fd85.css HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyQG%2BuIcBk0FE0KuHxF%2Fn1QYJxWzgJsQpNiZ60IocVnQHtqIUBTtwmvOJemMD5xlXeUsQFFsXeW9wmIAH78JW4V5XOpQXAG6%2Bss9SwMnp%2FtUQiQdXAth%2B43UM4JL7KbqtV8qXg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660add7523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32944,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"a458c40bd6cf7610708540365dc0c4fe","sha1":"b06a85ef920480a177265a198e47161764a6e6e5","sha256":"f5a8c45bddb36932770748cf44d3147be03735816bbb8bce556130c4ac4197a7","sha512":"9af52a9921c5031fccd66516ba5fde4620700d84affdd532e9bac5461fc81e3ea61c3a44b2ee717b295aa92e7aee32c39c59390eaa1dfc3d5fa27318460b9cad","ssdeep":"768:CliAfQbmf5s2jSLl3L0bY+F+TF8dxe02kCoK5eSSVT:tw","tlshash":"c8e222482507321d633ba7947bf02b966e255c32db9b41beb5e3214cc1e837938e279d","first_seen":"2025-06-30T14:26:49.380538Z","last_seen":"2026-04-25T21:37:12.796655Z","times_seen":79,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/header/market-screener.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/header/market-screener.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4i4F6G%2FwM42p17d8GwID%2BNArlwKExmVlKZ44hiXCZomZpJumIFBREo8p8sE8k7%2F5VAYR6IHeKcF7nYsIWshSausKn%2B3H0NqHw7APRURiF%2B2l82alBe8j%2BosUtdY1I%2Fn1UK4y%2BQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660afdba23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4bc1b9af0dc3f4faa84f9296a1cd6f55","sha1":"19478f202a83336d5182ea98e36ceed7b44803e6","sha256":"47b6987b48b908d52d3483d0ce8dc4b0476d4d9840906830d150467aee1e4b3e","sha512":"4a7212cee040e5c766daf774d117fce6d5c0b001656123cbd08b57c75af24031fe84ab99beb868e1552135da8ea034d0ccd144ff86496a8afc97c307b42c0ace","ssdeep":"","tlshash":"7831ffc890d6c9f9aa64c70013f99f95386238fb3250099cfebc642337920a8309cfd6","first_seen":"2025-06-30T14:26:49.376998Z","last_seen":"2026-04-25T21:37:12.733593Z","times_seen":113,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/5.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/5.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 141004\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2F6EMiyY8xWG956urykpQW8uycHHUaPMDtcvfFKVK4k0%2FH%2FyIZJi%2BOhG6jQ2l17Jx68HmefP8wt0TF9r7mhBzQUd%2Bypb%2FvFKu%2B%2BHkZRpBw4L1%2FXOnSf6DISE%2BKJBc9fnlxDKFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660bd84e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141004,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1125x538, components 3","md5":"cc5b67f5e1ca710efc070af7df452d6c","sha1":"da9525b44993588f4fded2610a82413e827321fe","sha256":"64cea25b8c01b67395275fd13a33ffc874397cbe49adac6ce2898d6d1ab12052","sha512":"d960ea2b9fd4a8c6b9d0119ea2871b7791a83a17056649cbacf09acc4abe7a590834f79c20cb8e14cea07563ec4c02a3c893fb1d7eb6c2f3b0fc09de49771f75","ssdeep":"3072:aARmHH6J7i9kHYio/0x3t0mcrb9tWw2E5i7Cm7wQgz3n:aAYHH6YQY6x3tMv9tWbbVWL","tlshash":"48d3f13cfbe7eb624b4b643c11bdbc3b631149c512e426471a530d85ba98fb896039bc","first_seen":"2025-06-30T14:26:49.325951Z","last_seen":"2026-04-25T21:37:12.785152Z","times_seen":81,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\nage: 30064\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-04-27T03:50:58.519577Z","times_seen":16932,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":13,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/fonts/inter/Inter-Regular.ttf","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.ttf HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/assets/css/root.css?v=6\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: font/ttf;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nlgdk9k%2FSRa%2B0kLIecP5pYfpm8vhs%2FblT39CjIRyGodawwz0RbneMOBIWvc6xQr9TmBrXlzISe5g1yhD%2FreANEL6%2BlJTIwNFkE97XuZHVDFlMPHnMn6ciXz7RUpqmEHdrAIMRg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660f08b923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-04-26T21:32:32.84475Z","times_seen":3643,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 42396\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"658b77e4-a59c\"\r\nlast-modified: Wed, 27 Dec 2023 01:03:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 215882\r\nexpires: Wed, 17 Mar 2027 15:23:50 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZ8Rf5jiPtjwQijeH0ZET1Y0Dfub4mgbZ23UoNRDclU3BquJZPgV3BDg9PmHcDGFu8tij3W750Yx99%2Fchc9cDWmz6Km0esiMJ1g4%2FI6lj5r5batNwFOwayNWFWcEAL8unO37QjTf\"}]}\r\ncf-ray: 9e2f660b1c43dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346626,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c83c4bce691e18f82409f87b2bf84e4","sha1":"3958d951f073022975e50de0c711a17bfa1b703f","sha256":"03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962","sha512":"fe4eb9f06e94b02bdb906441def3d7a6c3c781679db89c225863c2192d78210c37c69afadc010c740f273181b68266245e2b50c434e7ea288aff67c3e13f3ba8","ssdeep":"3072:LRA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:LRAI64wN89BqZnODweSgH3n/hIB","tlshash":"b5742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2023-12-27T17:19:29Z","last_seen":"2026-04-27T01:48:06.174166Z","times_seen":5246,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":7,"dns":0,"connect":1,"send":0,"wait":10,"receive":3,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/header/cross-rates.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/header/cross-rates.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfB4knEZDWsVEJGJO73UTPAwYiRqDavYxg49j3ArTNI5mXOEvuwy6caV5jNOMvXpNLsW4mrLSab4LbSZC6fvLeofMdv5t%2FBJJxMtyYhAIxxPaVGtBQXfWRhPgJnVxx1djj8EnQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660afdbc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"02be597a3ad6a955e4e583b457b1e190","sha1":"823e50a255fa3017ed421dca17572f441a925f24","sha256":"8160468486c656c080fafa23f1287f381beb1e51e41c0bbcf61d712fe7bbe735","sha512":"0b147ed6219aaf3c56a216ad6ed39e08876c8682d5017374d19bdd9689fb36a425774e954209f3ae51991d4d4da48865756116a10956d6fd4f5c4bc35d9156df","ssdeep":"","tlshash":"1e51d943e378e674aa4caa5d71503a50667114bbfa30908887b61fae1c437dbb284e35","first_seen":"2025-06-30T14:26:49.339654Z","last_seen":"2026-04-25T21:37:12.73432Z","times_seen":113,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-product-perpetual.8e03c0f2.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-product-perpetual.8e03c0f2.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 4106\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0XkEFK4N72pYiNN8okjRA5V5LtLAxMMvRpFABsjNnNl6x4p0lCDP5%2FHfCxRXYLu9qFcmOf5SgAlnWMXA701eSEDglwKExzoFBJkqj0vuhCJSKI0XQrlC%2FxLHTd8cvfjSLowsYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c49ba23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4106,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 237 x 163, 8-bit/color RGBA, non-interlaced","md5":"b85952e9c487b743c2f247a22e7235ac","sha1":"4f98674fb7b2d52ed2055538cdc38d7a17af244f","sha256":"a6708e7e5668b4e42a7f041b11e80f50da593cdc0d38c40da20190870fcfb19a","sha512":"187aa80590b05257d04c14385857f9bc8f9012e7edce22785d2f6281f168c780eb8df226faaf4a1bc64d1f03a0974ec49bcabd8739cf31fc434b57ba06d3ae2c","ssdeep":"96:Dhvi+032mz37rmKfk/HLpM1AMkloOwbZuCVQBHKPrZs3t5:DhviUO7Fk/rpcA2OQZ/WAzZsn","tlshash":"98817e45b6897cfce6584aeb497c4b2d1c3d954580489af17c860fc436aeb5cc0f7b44","first_seen":"2025-06-30T14:26:49.369045Z","last_seen":"2026-04-25T21:37:12.755188Z","times_seen":81,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/main.mp4","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/main.mp4 HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: video/mp4;charset=UTF-8\r\ncontent-length: 1498752\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncontent-range: bytes 0-1498751/1498752\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0%2Beeglw77xRq4ztejdDgYJOmoNAfXsDH5ILNxaRNtAS%2F3VciSzWppHNE5XvjIEiU72BhgfwHGDNlck7zHS4E8ff6B3x%2B61TXII9dEdu7o6q0TlY8frQ4FHI50m3Gk0DQ%2FwxSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660e5ed123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1498752,"size_decoded":0,"mime_type":"video/mp4; charset=UTF-8","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"e6f6cc8302820deafecdbf07ee3e0f52","sha1":"1aa52b5da571b2fe9da72eb81bcd4c63ef2a56ed","sha256":"4fe3292708b0f310a363c70ead038643dfb60b713eb1b8cc6da9103bcf68ceeb","sha512":"57173d2e3c49f150e904c239e1324b1d868205077c2c9cbf47d7dd27be7532ddc4ee26fe32cb3f260d67e9c2b9d4cac47b4037c0184ef6603890538bde64f070","ssdeep":"24576:AwUD3zQn48MezV7miOypKjjbRsQIJ8zYuUDP/TYK8G:K8LMeEiOd/G9JW4sO","tlshash":"ee2533ef11a50e73fe77abb128b09bbb08cf5ce625491844f91c10f6474a9d1a180dba","first_seen":"2025-07-27T02:35:37.325114Z","last_seen":"2026-04-25T21:37:12.777596Z","times_seen":73,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":364,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/3/cd23cd05deb514b1.p.ttf","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/3/cd23cd05deb514b1.p.ttf HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/assets/landings/1/fc74fa5d8eedd6f5.css\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SR%2BdQDp9MWg9pH9NWugYpMbnOEOYFEwqkKe1mp7DTcjKkqZVTuhYLHcUcwXTGSKRnPSs3U9gC11iORLG1LVKJSO9yNZtOYwO859Au67%2BP3687srealN1we9N4uzBz2DHpa5trg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660ef8a023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":74729,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953), with CRLF line terminators","md5":"e64ebbfc14988b9012713c12fbff2c50","sha1":"699d17b8669f352d2003d07416883f505de8b24b","sha256":"c5abd05d679241850ea971e20efa0486dfd1f84f6eb2d5ceec05414e55b528bc","sha512":"1f484e315a3924a3aec1e1d3b89c3edebd5fdc7362c038e659449394dcb3bf7777d05fd2bb8a7d4f3144928175c3168a867b5fdaf03008f3c4acef852bdbd65d","ssdeep":"768:zbq/GGhM2EGWUWvbnK54447zHItQmyu1G+OSF:y/RENdnu4447zHItQmDG+O2","tlshash":"2c73836065c0585281378398a6b29ba9fa6581179b4ec68072fc3fc75ff2e81cec351f","first_seen":"2026-03-27T15:07:52.636106Z","last_seen":"2026-03-27T15:24:20.490583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1179\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: c8900f7e-24bb-4d50-8830-4feda97f3b35\r\nx-mbx-used-weight: 12\r\nx-mbx-used-weight-1m: 12\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Z6htiAHG2HtVsG5j7kZi7ljEh1QG4Z0xanmalXSjJEnhwe6P08oNig==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3995,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"38abc54b22ae4f85708ea8f34ef79301","sha1":"41d81824bc72b0cb244241f00211a2af6a469f57","sha256":"e338206c550fc8d3378d854782ccbd2ebfde2c929c0dc22a2897af20ba4890f2","sha512":"5635e30e275caca37c34706e6e7cc13d24cf0841476f4d31071ab116a118c35a28c577f38a4bb32e256d9f1f4f97a7a96149975a18d7f1679eb8344a37c13753","ssdeep":"","tlshash":"8581f541069c82a0fa3a890923a3f9e5196a745bfdca0fc047e479371ce13764b38f15","first_seen":"2026-03-27T15:24:20.554706Z","last_seen":"2026-03-27T15:24:20.554706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/3.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/3.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 68664\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqoDqFSv9Xj%2BR3zk7%2FZsX1hLEgdR2vqXE%2FqRON4ypAOmKO1ejSwnDvei7hhwTwrTBw2azQUJPTkRJzngMB1yGgcN%2FXBe79unQRKbyvMLyqBjb0%2Fou79RgwLTZ3t3DNHvxwMzdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660bd84623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68664,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"bec7618782ed69444aad9dff5e18e446","sha1":"fcb6f5264951b4fa657a53b0441856c475f33208","sha256":"9384d0b5e7b8c97313e30b0a0e1e9b0aeccdb7b48a0a769eea52f06a996f6fed","sha512":"0af020e5709cd32c0556e5d96f69cd4c9f3af5b99b49b8d793fe7ff614892235b7614c19b3104471caaaf602d2037951b77048b002ea982239d18b04953fae06","ssdeep":"1536:arXj5gOFB32+4JC9hY027Yidd2nyGONtz84DEzR:AThzLsC9hY0yddOkI4Dk","tlshash":"556359138c484b83a16d53a9be174ea81f092a6de9d27bff08631ec779153361c5e03e","first_seen":"2025-06-30T14:26:49.356516Z","last_seen":"2026-04-25T21:37:12.773126Z","times_seen":81,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\nage: 42099\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-04-27T03:50:58.464434Z","times_seen":17145,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":1,"connect":26,"send":0,"wait":13,"receive":16,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/fonts/inter/Inter-Bold.ttf","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /fonts/inter/Inter-Bold.ttf HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/assets/css/root.css?v=6\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: font/ttf;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BaBYYqIdjW60PtamLt%2B0QJjvcZukw%2F758aS1coeowstv1CA1uOKEVyMklK06A4ebWRht0u3L5TkaRQlzyPXZ5SOe%2B3Ross0TBmuZHW9TU7c5tV49d7ZEkWMySxceFMriww5mmg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660f08c823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316100,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte","md5":"275bfea5dc74c33f51916fee80feae67","sha1":"48747b7a60086f97af0d373febcbd1f1bee87f17","sha256":"790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe","sha512":"0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11","ssdeep":"3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF","tlshash":"08647c03f313c35dc9172d3a8b92c7a0b327bc926b12e10ab7243a55c99b4f85e6b5d5","first_seen":"2023-05-10T15:50:10Z","last_seen":"2026-04-26T10:25:43.049546Z","times_seen":1267,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 10:17:38 GMT\r\nexpires: Fri, 26 Mar 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 104774\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-27T04:09:43.184306Z","times_seen":101104,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":196,"dns":0,"connect":48,"send":0,"wait":19,"receive":9,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Thu, 30 Jan 2025 13:02:18 GMT\r\netag: \"679b785a-4d\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: HcSI2pCoByyogbEarVEnj-PQznqwcqKTRQWShLN051U3OqpnCol8Jw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"136f5552348d90a36b6c9a49046926c1","sha1":"b992325f95e0076c147ebf6593433f938b244f4e","sha256":"a60bafa499acbab1b73b92511707557400155adf5fd6a186cd56a2b822935ba7","sha512":"b790d85cf0597615435cf72e9384f8e640642a1cc3cc3564010a006eedbf5bcb956120cb81ebef9254d4675e785091a07d2cd79c66381fdc39b80ee5f4e48b8e","ssdeep":"","tlshash":"baa001f9a5a62009e92076c01cd532941c8983a030d24a102ac13969b55562ada06299","first_seen":"2023-12-04T13:46:15Z","last_seen":"2026-04-25T21:37:12.778757Z","times_seen":479,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":38,"dns":7,"connect":1,"send":0,"wait":236,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/arrow-down.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/arrow-down.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYlm9mG7vXVGFGo6nmLHqPNx9OV%2FkYz%2BYrXLe3zlqzkgSWclcjiMjmLPE3R3DdPGYrHXGlXMHOp%2BbVfDqiNAxaxf1SxiK4FUD5p%2BPNE1%2FyEnORu15K9WL%2Fs2VwsWxLwF5BRHjA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660cdb1e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d0be16ce06ea0a66b8c8be201c88f71a","sha1":"03afb7918db67625b2365659d303a057071773eb","sha256":"3e6f14737272b9e9e4b60048aea76d784d99ed190878112b91f2cfba0c6fc77c","sha512":"c26291f4c90c6fe57adfcd466577789d483352812391a587011e19e0e8bf111230722309775ae62ef605ce3ef8bc7efe533b18eef7fbfea696f60205f169c245","ssdeep":"","tlshash":"19d0a79841d84d2ce6664650d7783664f03e10735f894188ea52713ed51a6cd6c339ec","first_seen":"2024-12-06T22:27:57.083257Z","last_seen":"2026-04-25T21:37:12.775113Z","times_seen":412,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/js/main.js?v=5","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/js/main.js?v=5 HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOJWoYVYFARDwH5Zu%2FNp6LBSN47HBKa4jpqbJQBW1V3%2Fhgphe%2FpBU2PPxiPcXZ5ZyYTjvSMFokbz72KA0Q2hwSENojrPJDxbZZBsPLAOB0VMnn%2B%2FGuwA%2Bb%2F10wEwkSuOQA8caA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660cdb2f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21249,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (430), with CRLF line terminators","md5":"c8129e7a736eb7ab1bb4ee9f4d919fdc","sha1":"268925c35b15f7b723c0c4ff913610f7c22bbd12","sha256":"0fa2bfa1e742acff380af5b6ea26a4cddf165f7313c43d64cec77e2de97ab7a9","sha512":"5efb0f92dbb776182f79fa6ca42a0f22e44b753fc11a335a4de33b46b1a23c6d47bd682063b010144cd32e00a5e7bdbfba5db45a0049339b7a0db0388da2318e","ssdeep":"192:GVH2ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxg4S7/:GXKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"64928298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","first_seen":"2025-06-19T20:02:29.443643Z","last_seen":"2026-04-25T21:37:12.794526Z","times_seen":273,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/logo.svg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:50.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:50 GMT\r\ncontent-type: image/svg+xml;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcYVlWadfas8xWDKXSbyItJkTkZWAerZkLzVLSkJ7fhsos4WyaopY54kMKOXS%2FqrKiLH5mEzd9mKk6TD6EGKJYeqnH1rziP4B%2B8DVeca7L0JgatRv8pkC%2B028anJcJsxJB5HHw%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660afdb423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"8de8bf461d9961680647e78f69eac5ae","sha1":"cf5ea57c7f73e047b66a5199302eff1e958fc26e","sha256":"606375a97e3c2a44350ef2887d186d385e34bcf8e853c61c6dd547c7cc3b46b2","sha512":"1ea1093ea3a124a8322e0956d483aedea0f4d9924e737dbe03433b7df7e6882610e9c481dd533bd61f84343428ec84a1c3709bd942802a3d4519adcf7d399a72","ssdeep":"","tlshash":"fb21df6ed3185c3bf02bc36cd6f0801652a66149e6c9c7e5f7a8b71f6515ca31c29788","first_seen":"2024-12-06T22:27:57.075232Z","last_seen":"2026-04-09T20:03:33.946949Z","times_seen":219,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/8.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/8.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 193889\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VhSPrnxFcKgKeRlTMdqCz1hTqxGrz8e0P2m4f3b0TerIst4H3Kr7x%2B9rdxY%2FmqySiBEoTZag05wug8YX%2FUax7JR1KrQ8%2FDB%2BlXvaVc81eu2LyUafH%2Fiee2G%2BLH1osifpjO%2Btw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660be86423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193889,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1125x538, components 3","md5":"9be04dc2c6247d8b3a96481ee29b74a0","sha1":"d16ecc06fe4fb39eb49f8419a641f6b27a77d606","sha256":"8fdee0771929b980d0ca313f0feebd88c0d270a335acfa285599e0001699df2d","sha512":"511268d61e9c918607003dc7959ae4ffd41335a56cdbf57e512cd67405cab65ec383497a4a8c1322c1c869a6e0bd851877508a47ec185fb7ba23f3dee30c4a13","ssdeep":"3072:aBzRHpoRExoagELfsSTQSzvNWsKZ3a8E0M0qVj3/G/m7wQgz3n:aBzRHKEq60SkSzvNWsUEluuWL","tlshash":"d21401b1fbd3d7a94f2b615d057cbc3b270e05ca0ae1654359436c18b618fb9861ba3c","first_seen":"2025-06-30T14:26:49.333477Z","last_seen":"2026-04-25T21:37:12.731753Z","times_seen":81,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/4.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/4.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 74130\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2B8GZuDLrqZQNMysSAtaR7px2gX5agJ6z1oi1Pia2qpWQ%2FVxixiH1kvrhNIhaC6BJGcScR48HFFUaEkQpPsdj%2FuT7FQP3HwHhfa%2Fpug4jJMJ5%2Ba%2FNfF56q1NH01Kk46%2F%2BF1oxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660bd84c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74130,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1125x538, components 3","md5":"fa48d22dba7c8f5da5e4a42ce61e2819","sha1":"52ce2ff5b14ea7cedbd9f16416cc6db4e5f07152","sha256":"26a98c93e18e36ecf60f50544efb84a9edda0dd360983085fdea1bc4e73a8b93","sha512":"3eca9b56c9933c093dd0c09307646703af91880ed82c35f15c6eb498dc8b5c9469c6321ae087f1eed0e1b270765d8d74780b9944e819f384255be17e49a374a8","ssdeep":"1536:aGIkVmicAeVdn4oAfh8W7prZIaQU5cRETFk3lVCBh2GI4apqy4MsPY2mI:tIkVbcAeVe5pLIaQWcRAFBBhi4apJsPZ","tlshash":"40732617cc454b93a8a983bcbe474ab94f086a0ce5d63aef01730e8736647765d0f16e","first_seen":"2025-06-30T14:26:49.40716Z","last_seen":"2026-04-25T21:37:12.805479Z","times_seen":81,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/img/12.jpg","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/img/12.jpg HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/jpeg;charset=UTF-8\r\ncontent-length: 204051\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxkRoEMX4qeGlOL4kj2oyMxOMtZyOgaNHlZgWUns3OSiWG60tAVzyqhghvNdTourZsSovLHGWcZt8uK%2BTnQdX%2F81FH3sZhF8y%2Ff7cIM1H4hB%2BiJOYn1gkMQkkhIS7ubTM7M1CA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660be87923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204051,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1125x538, components 3","md5":"e8f2c07d9f6746af3e1dd88c03cb06d9","sha1":"77b07ae461efceaf2d64518afef0d8714f8f3c22","sha256":"1c289b404d6b36473f0f92abe2f8d3d8922240dd7ed98a563ad0c01d922356ea","sha512":"b1f894afc9829f534924109e95c2b1d733b8ff29866e757149d484b8af1e4adf461622825452f399c523afc5d9a0705ad3b8ca33c1866a8b096d275179a22d16","ssdeep":"6144:Ty4H1wc4LBUm7bSh9lTa46RYrSWgR1/pu:W4Hj4LH63lTa4sYry1/I","tlshash":"5814df78f3d3e368175f26ac883c3d370b561ac842d9a19328136c49b69dfb9696317c","first_seen":"2025-06-30T14:26:49.414515Z","last_seen":"2026-04-25T21:37:12.799131Z","times_seen":81,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/img/coins/ETH.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/img/coins/ETH.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 1100\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zK8QRedgX5ZeoTpw8a57AI1G5fbYoT8PNjTVrDrDlO4YFYpDagA04t8%2BxJf7YvptpgICm0A1%2F0ppZ5DheYBfgr%2BrM5BvJfZEsraEIFeaf9jh3U84Wp5YNHnX9b7U41%2B%2BF3E4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f660c399923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-04-26T05:18:32.677927Z","times_seen":1564,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/js/toastr.js","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1t4QdRXxpx3la4Gq18w4sabra7fMM68K7GLRSpR%2FYL1a9Fz1MMvcbWX2hblgAKvf%2FPJYNKPQK6p1wwxenSBWKu%2FmadHo%2BAWRHWXTjqHBIid8GdlEAdU8Cc%2FXFzYMB%2BjgoUhfvg%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660cdb2c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-04-25T21:37:12.807784Z","times_seen":893,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/3/526d8a763de639e0.p.ttf","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/3/526d8a763de639e0.p.ttf HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/assets/landings/1/fc74fa5d8eedd6f5.css\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KouF0MZaWsVNxRhrt1TpKAHOFX6BcDHxtz08yiY44g1ScPv16i7XpP9NDpUztyQh%2BIMmA2jNiKaRdsf6vjTj9H9WZP7Amq84xatr2E5MPeDdc7tiizREybyXn7Mv008JK7SQQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e2f660ee88a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":74729,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953), with CRLF line terminators","md5":"e64ebbfc14988b9012713c12fbff2c50","sha1":"699d17b8669f352d2003d07416883f505de8b24b","sha256":"c5abd05d679241850ea971e20efa0486dfd1f84f6eb2d5ceec05414e55b528bc","sha512":"1f484e315a3924a3aec1e1d3b89c3edebd5fdc7362c038e659449394dcb3bf7777d05fd2bb8a7d4f3144928175c3168a867b5fdaf03008f3c4acef852bdbd65d","ssdeep":"768:zbq/GGhM2EGWUWvbnK54447zHItQmyu1G+OSF:y/RENdnu4447zHItQmDG+O2","tlshash":"2c73836065c0585281378398a6b29ba9fa6581179b4ec68072fc3fc75ff2e81cec351f","first_seen":"2026-03-27T15:07:52.636106Z","last_seen":"2026-03-27T15:24:20.490583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grizzlychange.com/assets/landings/1/home-excellent-liquidity.7596c94a.png","fqdn":"grizzlychange.com","domain":"grizzlychange.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:51.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grizzlychange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:55:23 GMT","end":"Sat, 02 May 2026 02:54:13 GMT"},"fingerprint":{"sha1":"8C:69:CC:39:13:20:19:27:9E:5C:D0:52:9B:E8:F1:88:48:F0:73:32","sha256":"62:CB:AD:59:A4:BF:FD:83:7A:3F:2B:23:83:49:A2:5D:22:AB:E2:73:D5:AD:FD:A7:0B:29:7B:7C:21:76:0E:E6"}}},"request":{"raw":"GET /assets/landings/1/home-excellent-liquidity.7596c94a.png HTTP/1.1\r\nHost: grizzlychange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grizzlychange.com/\r\nCookie: JSESSIONID=83E588965EE4EF0C798043D83F642011\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 15:23:51 GMT\r\ncontent-type: image/png;charset=UTF-8\r\ncontent-length: 7871\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Thu, 18 Dec 2025 11:57:39 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxkYcOVtkYq7t0UA4ZO4xK%2Fr7UtFDQclgUhKp3610ctYyoCX6l4ZHHk7f45cSXFiOa%2F9fsOYwDRGmp3AaQtyDwop%2FYlH8%2BpL6I54N8LSN3hnhY3gJ1sS%2B5uq4N%2FgWTTmmPX1Mg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e2f6610dde623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7871,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 163 x 160, 8-bit/color RGBA, non-interlaced","md5":"2519b719c5a0c85cb85c9e68d48423ac","sha1":"ee7d4d2ecb1ac1496efc56c1b56e3e3b5586f19f","sha256":"8866bd1213e12f1d76e0d9e19550bf998e60751d6e31c5b8dccec7190e308d8c","sha512":"4f6c522466503fd299c11f0167f8a91f48186cf5559a18986668bd82cdcd0098ebcb39fa1c6af6409b1a2de9510eaa2aa731e467896db668fad28c4d08526fe0","ssdeep":"192:ZQikpUZ/YhXktxkasVqwIOCWP0oJ9zWk+zy7Ox0E/GELIWbK:ZQikpUZ/YxoO/P0e9J+8Ox3Lk","tlshash":"cdf1aec97800d82293584f5d2e4337c09f377ecfea4646baa0f2f7c9586190bd9815c6","first_seen":"2025-06-30T14:26:49.391699Z","last_seen":"2026-04-25T21:37:12.788801Z","times_seen":78,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"grizzlychange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grizzlychange.com/","date":"2026-03-27T15:23:52.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grizzlychange.com/\r\nOrigin: https://grizzlychange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1261\r\ndate: Fri, 27 Mar 2026 15:23:52 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 2d94b2f3-d12b-43c3-929d-fdc437eb21fe\r\nx-mbx-used-weight: 8\r\nx-mbx-used-weight-1m: 8\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3ecfca26003921b3f6dfb1a287300c24.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: FqTsDpNh2EAlNc-eUsbn2_yzAkCFwcCLd9zDvVHc_ILV-1pOXLZcCg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4068,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b44f316204e042a0f11140190f78a0ca","sha1":"50909d7cbe1851fddb85c9455c5a8513781f92dd","sha256":"4f200468f026e20c04b7a723ed08f0ffc45bf1d50dd27f24616eae5da794d7b5","sha512":"7da52edbb442db934e3b433c6fbaf69ecf446c1dad81f6be6a22e512f2806208e6a4c569c1213c4cde1a79cef65dcc841f2f40ac60b6a3d3e21b51f349ac2514","ssdeep":"","tlshash":"5d81e6611a988660ff76c81937d6f8a24d6b709beecb0cd49dd0392708f95b23bc8701","first_seen":"2026-03-27T15:24:20.57446Z","last_seen":"2026-03-27T15:24:20.57446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}