{"report_id":"53747e92-226c-447d-9201-dd1c8e407cea","version":6,"status":"done","tags":[],"date":"2026-02-14T00:24:40Z","url":{"schema":"https","addr":"darkchange.net/","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"darkchange.net/","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"title":"DarkChange | Anonymous No-KYC Crypto Exchange","dom":{"size":429298,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54205)","md5":"4b51c562322196c1d8a02ca90447273e","sha1":"2808badfd6b495af6b0a6184c49b1697f9dced99","sha256":"874606f55e45766642fd052801f649e5f2fbd1a994f36927fc8c85f43117ff38","sha512":"4a69bfa07c5efac797b6638fe00408678e8dee968db89babdcfb1d048c4b5a19eaef1f89be4a0e019d875c52cc19cf326652a7551444567031377cbee23d7260","ssdeep":"1536:tAUMDB+zty5oqtyOO90ATXQde05leN3X1eDcRavYt7WN4HSJUj++jgV6P8xW7lw8:iUhsODt4/vpE8nHrnDq","tlshash":"7f9493988324527df849c7ccdfd6980874ad86ffe981ccd862498f7f86a488d0d8d7a5","dom_hash":"domhashc7fb2a8c2c424cac1d9800e9488889df","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"darkchange.net/","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T00:24:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"darkchange.net","ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-19","domain_rank":0,"first_seen":"2026-02-13T01:17:16.884703Z","last_seen":"2026-02-13T01:17:16.884703Z","alert_count":70,"request_count":35,"received_data":5447482,"sent_data":15861,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":2,"received_data":23464,"sent_data":981,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":2,"received_data":61852,"sent_data":1136,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"darkchange.net/assets/index-CGGpCbum.js","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be09a06eeb08d6fdcb9067b810e55f0e","sha1":"712771b25c8df4c287dc1ea838bb4f25ee5e702e","sha256":"3f7faebcf782052a52092e7d220152e6537c531bf42ce18e7826dcdc1f7f36ce","sha512":"1f34f31a79be6520800967345a97cc388ae4df755ca35a96035a84ae0d12f643aeef26f709b26c8ac849aa41f9ddc20e1d5de3feea1c6a3110b79465899811ca","ssdeep":"1536:vSAslolLoM32F6kj40NbiY2UKkKsKLFqlt86gkLINkHVuN02MYYoyr8nLjND1M4x:rlId8XY8nLjNDW/aH","tlshash":"7e842294c392296bf844cade8fd6180c3c9e17ba9ab2cce5964d473a40f84cd365f365","size":403280,"data":"","first_seen":"2026-01-27T11:14:18.661749Z","last_seen":"2026-02-14T00:24:47.9313Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/assets/index-CwAURFwk.js","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7326b6895a4fe03bdec3f73fa03f2e02","sha1":"594bd808f3fa8a7dbe31f264e691e971c937d776","sha256":"43c80f0b0ab5e9b7c8d2d027d8f4fd32d65a8b3ea161ad79a16fe8723ab16d95","sha512":"1154b0a9bdeb32d8efdcdbe95dca0f2e16dbc193ec4238887eea6d06a28c153337070ca07d80c397da334af6b0a6a6576227ff7b7227d33fcc045a53a4cbbfd1","ssdeep":"12288:CBMbZLUk1FUakPil+Axmvt4Oncspg0GsIrPfhfFjRB5IW5Rf7TrjOyfGkYXmsiu:CsfDUakPil+AxY2Oncspg0GsIrPfhfFE","tlshash":"69a43bd872a9b1255be345e4407f0203b2392966740c88a4f13dedeb3a7544a51bbffe","size":469986,"data":"","first_seen":"2026-01-27T11:14:18.676615Z","last_seen":"2026-02-14T00:24:47.935312Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/monero.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/monero.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MN9oP6WLE5%2BjWdEUIMqXxGSrC1ZsG0QFjzA5c1JD7Fo1ko6hnNx78oNJ%2FVfCptCo%2FP7F4kieY6x%2Fm2TacpZBsbYQ%2Fo4yAvdJS7gWOzwN\"}]}\r\ncf-ray: 9cd86bfe285cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2ca19ff8f70bdb98f8a23295c6554c1","sha1":"a92bedf94c89c359648204c82bbb969522c9844f","sha256":"9dc52b168b3878f38917328243b9df5715446b989a406257dae21d893063d2a9","sha512":"6b5265fe0b74b33ba788979a6563cc444f974e54da072107bc6aff6dc0f5505960378284b2fa58ab70e71f68d9414e479d5526c7addfd53cc1d4cc04b7922f6b","ssdeep":"","tlshash":"4f7195f99b5441e0a48adbbafc38d92b312f34f67dd58dd0c295fb05a4820af8d458c0","first_seen":"2025-11-20T12:33:07.027055Z","last_seen":"2026-02-14T00:24:47.915178Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/solana.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/solana.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QoPWfAwClh5AQfsnEXZRJEULaT1oBBxxJdq6vudaJK3Z902RBpf7YQutsotdzXwDnandn9MLlSqjAketLJUyj%2BYvZfYM0Z%2FCIlQJh%2FzI\"}]}\r\ncf-ray: 9cd86bfe285eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5991,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"416fc35cacf9a777fbbe7cd78d916289","sha1":"d13c9d2926450fb919ee86b6e8cad8ef483e8597","sha256":"181a3cbcc13de2a013f631adf6184cc935126e368c1ea1c2648abb45d9d2c19e","sha512":"e9b6a847d284183b6c0953af1ac0361745981dcaa416c2451b56172974efe9992d53071c2ed12dc4fad76fa58f138ecb4a70d648fdc6d37db4584f5e97e2c100","ssdeep":"96:etKqfj51GhuQt2MdDBTz5ZYrUxZ+DYydOYWLM48Nd/z/BYsHOoICXL:et7PMdDBTz5dxZQd5SMpbb/ruoIEL","tlshash":"4dc194d9774473f4a90be73ada2951b6f62b3cfe7f398e90c3049f166015109c464ca8","first_seen":"2025-11-20T12:33:07.017571Z","last_seen":"2026-02-14T00:24:47.917578Z","times_seen":7,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/exchange/estimate","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:19.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"POST /exchange/estimate HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nContent-Type: application/json\r\nContent-Length: 75\r\nOrigin: https://darkchange.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":75,"data":"{\"fromCoin\":\"xmr\",\"toCoin\":\"btc\",\"amount\":\"127.43\",\"provider\":\"darkchange\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: application/json\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMY2No4b1oTL%2FcJTYHQX08FwE0PJsYS7EUGy%2BdzGCJRfUNMhpnIQGNRYvEa07Pp15F0eXW%2FuWfUbzHBe6SmwmmqGCqeoei7gIrG%2BKx3V\"}]}\r\ncf-ray: 9cd86bff7897b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":188,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"49a11d90da9fc0eab4ab878dc37c37b2","sha1":"0e22e15f3ed58fac42ed68169cd56c91a5cf525c","sha256":"498ce810435764fc9a2f5293c9bbeb0d636b9e4f395adc517e86ee60932e11a3","sha512":"6833649982278a0c84c8df10bc4e9c19d9617adc4d974aa058319a2b7ba7eabbbbe9a0b3ab6bb77b6fbe2052aeac1ba25219de454a76ca529bf220494cc36979","ssdeep":"","tlshash":"07c0c01c35042c32cc0901d5e97f02307dc3533170ac5e58cc4bcef642c02c94b10d24","first_seen":"2026-02-14T00:24:47.918145Z","last_seen":"2026-02-14T00:24:47.918145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/illustrations/planet-exchange.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /illustrations/planet-exchange.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/illustrations/planet-exchange.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /illustrations/planet-exchange.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXmMZZBMZhCGoh1fzBodqvfyB2HzD1OO4hb1C9JuAIRXr5Lx2jOGr%2B6qANhEjmhpjugrxmm4f%2BXZuJxTmkY6hGkTl8N8PCk7fxK%2BofXv\"}]}\r\ncf-ray: 9cd86bfc881bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25117,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9a0df7edba2e41113eac5480b22034f","sha1":"1d2e39df073e7197c43d1a796dd47880fec229be","sha256":"842537925bbbc84f2bd8ad4e76aea408d97941bebdb77ac1d63d07b7fc4832e9","sha512":"74b3dec52f555020ae25e6bdc034353ae5f407e428ee1bb893e5b69eb29f01918469828fa6cfa6c699b7b98e4365b84fbfdcb03c351875a9d7fcdf4d9f96c3f1","ssdeep":"384:ISXJ/bJeUL3VW20CFmkmKmAmMmcmsmpmb:IQ/bJeU7d","tlshash":"e3b2f46ab31dec36e254c68cdf96c4a4114943e7d981c1e582a67f5fa2388c7192f3f1","first_seen":"2025-11-20T12:33:07.00015Z","last_seen":"2026-02-14T00:24:47.920336Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/bg.png","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/png\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rdw4wuPJ3EIn1iu8qerPJFurN3hnB53Ge7KVuVrfzkJUW8Kq8UYEHlnlKv06NKbzBqhidllLl%2BqTvHpQGT8S81XbSDrU7jQTWG1vzsMs\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd86bfce825b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1279669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"8dd0a57d41112e0aedb0f3ff9254a7ee","sha1":"40f2e7e2bb886eff989c72b738dbecfc3e51c680","sha256":"8521677e417954ffdc67682cc6b2178b918da4c9fa477a7a7c34cedea8c18962","sha512":"aa4691282399ff0e815f53e381e77597faddb4efefb67843805f8f91d34d697bdd0b5145dfae001d83f2b55455aaef81a30888027688c1f3450f858ab84772d3","ssdeep":"24576:HQVUUnx4DaGYHJxZiARoiHkSmqa+NCisalCELNdXe:HQVUUnqZYHDZRnHkSmzKC1rsLe","tlshash":"772533acec06977f7c638b2c767840b28e7d495fac50de17068606e4963a4245ff48be","first_seen":"2026-01-10T21:08:37.478969Z","last_seen":"2026-02-14T00:24:47.922324Z","times_seen":6,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/fonts/CircularStd-Book.woff2","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /fonts/CircularStd-Book.woff2 HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://darkchange.net/assets/index-DKSPX2TN.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/html; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=068%2FYE%2FapuGV%2F%2FHYx%2B%2BBX2TaDxP1nDJgHgdo8rBlK6T2qJtqi6IJ0DQlt%2BMhJQ2dtIMCzy8ijprcOCkStzjh6m3cq3jsXhCUcWx2cQ60\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd86bfd182fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b59979c3df8afbe8f6554d909aaca4cf","sha1":"e51241a472f2d82abf8f8c5f712c8ac1d94d2149","sha256":"9602f423cb2a50e440cd78ef7ca2784feae393eecc9fdc770609929987ed6820","sha512":"d27e5e9b903fe720cdce98367e13ed7b1a154b831ba0df4560dbd1d93afe524dcd04824ea729fa6da1c99f3a36973b87c154143e84f9e0317642e8e67d80892a","ssdeep":"96:bkJvttM7IslGKv5M7IsfBkL+P1WcO4B+DYwXZQ38Iy389ay38KCq8CbgZZg:bkJvtwlGysfX19/+8wusIys9aysKCq8+","tlshash":"98c100a7a5e0dc2652e1407819f2b448993e40c7c6087e4bb3dc51de0fc9ae989fb79d","first_seen":"2026-01-27T11:14:18.656166Z","last_seen":"2026-02-14T00:24:47.922932Z","times_seen":4,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/health","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /health HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: application/json\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dptn%2FopNt7iPT7xGCuP9oE6qYuQN8KpKrxyY%2FztlC%2BzrcIeMpE40KqKKce5k8Ewnrr5oPyYkyiKIn4Hf8LQPjJZkN9V%2BxZkfEnsP54d9\"}]}\r\ncf-ray: 9cd86bfd1831b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e35f54a965c9179a663bbb635c4c6d8","sha1":"feeb9a4faf9b0e6b4ba3744b020bfe8b4e079a84","sha256":"928a770b73d9bb8076013f79c8e586e7e196564b2e63630bd627dce2b6e35dc3","sha512":"b6bf0c7ed30e73933bfba94c4066bed0d794e909cad7c6a45e309df707432d75f4700ffe7ac9783fc7bb80938f84435b3fb46ceac58c3f059ba42736185f1a3e","ssdeep":"","tlshash":"bcb0120112154cb5eba1812905013fb54d3d8133202610e4617ddb91003008a412f05b","first_seen":"2026-01-10T21:08:37.475516Z","last_seen":"2026-02-14T00:24:47.924403Z","times_seen":6,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/litecoin.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/litecoin.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XYnXG%2F0m5nNXW0ZN%2FvcGp8UYA1YUxzL2n42TQz50ZY%2F%2BAQUaMGvhVrPxjuxz7mFlQXD%2BYamqJJq%2BGKTKnj7UTDllCKL0I3PWbfOXHrf1\"}]}\r\ncf-ray: 9cd86bfe2862b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4819,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77825e6b48e1aa0efdd6258b271c17cf","sha1":"156ed22cbc742ce08b21e358466b95f7eab3084d","sha256":"69bc6aa46f2bd505fa719611d811a1a96c721d8bdbd296d3f2034332cc1c8f15","sha512":"99f1ff5cdd396ade45ca737792e2cf9e4aadf1499f1164563d6078b51279ef85459f55c63eb40df0f6898247d6c0a24efd51601dace2e4fbc5ae653a7b8561ff","ssdeep":"96:jgLevluwiIJoRsnysUajHBpIGbfF5E/zQHa5B5m7y/rYAhfvKCBLjHCd:TvfmRsnTjHBpXg7QHaD5m74DEoGd","tlshash":"50a181e64fe4b9d8a801d3f0e82880b23e5f20fa7a51ddf5c391ef49b61549d4c88c85","first_seen":"2025-11-20T12:33:06.993273Z","last_seen":"2026-02-14T00:24:47.925152Z","times_seen":7,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-icons/monero.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-icons/monero.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9FuXC67RkwNoyBs5vT55JntG9bODJNf6j470QthgfItLy9q5BwYW7StCqkPqHThaBc1l2d2AMC52l7tb8O5TsZJ3%2Ftx%2FdeiOmQvcoAs\"}]}\r\ncf-ray: 9cd86bfb7fd9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0464d3fc8854d5aac9aed51e4dd925ab","sha1":"4310eef588596e0c745868e6726795c055bc29a3","sha256":"01359ad46a5603d37dcb4c061717ee9e9d5bcbd56f86b21ce170f98d6531cdd3","sha512":"1a2648379029e852f88cef0ffd133ca87b89efa4ef0837381393241e08b407ed68de18b1d7e03c85a1ebe3927e89d48ffafb56380c72b2f092bf2b93f4afdc87","ssdeep":"","tlshash":"83019ee073980f1cc71647bd4f0c297957feb1efba6e5480b9493557a98c03ba8c9880","first_seen":"2025-11-20T12:33:07.007615Z","last_seen":"2026-02-14T00:24:47.926149Z","times_seen":7,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-icons/bitcoin.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-icons/bitcoin.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Klw2aQhuCpS1I1OX%2BUhF%2F5OSyiGkEiK3pjn3sQbp%2F%2BPo9cuzVdahWa%2FRwpx2Jt4frFf7dcOvEK%2Fw1Y4ROLh5bDiH1zkUHUL1rdTcTeo\"}]}\r\ncf-ray: 9cd86bfb7fdbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b8ebabff78fc0e1e27c86e0acd5689b","sha1":"362e6b1262d4bbf6804b7b20416f8defea0225c7","sha256":"2e74fab94b80eea9ac10b062442b5c050f1bf201d561eef1839cc37ff8b723b1","sha512":"a79ae1df58409deb5051280b378bad6edf5e3c6d3401f5c3c3e2db7c7b1728f801dbcbdae3669fd17482a1ae40623354265d4430dc091cce65495c8b7cfcda5f","ssdeep":"","tlshash":"aa3151ffe7c061f0d64ac378ee2684f8b84330792b6717da48906e9a63b115885cdcd0","first_seen":"2025-11-20T12:33:07.038409Z","last_seen":"2026-02-14T00:24:47.92679Z","times_seen":7,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-icons/monero.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-icons/monero.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKjuTh4GZcGHYRL8%2FT1i4ohkc%2Bg3u6jEZwpdnHoqFbtXhbbx%2B4Qix%2FPU%2FwITQbNicYHDILsC1gPQLOim8unAzE0V01O4d2oOld0OF6Eo\"}]}\r\ncf-ray: 9cd86bfc5813b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0464d3fc8854d5aac9aed51e4dd925ab","sha1":"4310eef588596e0c745868e6726795c055bc29a3","sha256":"01359ad46a5603d37dcb4c061717ee9e9d5bcbd56f86b21ce170f98d6531cdd3","sha512":"1a2648379029e852f88cef0ffd133ca87b89efa4ef0837381393241e08b407ed68de18b1d7e03c85a1ebe3927e89d48ffafb56380c72b2f092bf2b93f4afdc87","ssdeep":"","tlshash":"83019ee073980f1cc71647bd4f0c297957feb1efba6e5480b9493557a98c03ba8c9880","first_seen":"2025-11-20T12:33:07.007615Z","last_seen":"2026-02-14T00:24:47.926149Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/planet.webm","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /planet.webm HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://darkchange.net/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: video/webm\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vik0jBEy645eZwhn7%2F%2FH5mSpZP73kJKDcXoChYfhPoGGDxEXtc6ttdK76wIrIAjfacDYfSReHxiq6Zk34IJr7eatOWH2DeNx28rXSVw5\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd86bfe1858b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2197425,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"782b38402bfd341b844d25748287fe53","sha1":"6dfb80dd7cc04209d4d73279949a964048066ee8","sha256":"eaee575046e7c8a145a65b5256dce7071b05860a7a9bdfcd853a539db5caf7c5","sha512":"125708ee7f7a8d428882b3d13336acd091acd55f079d61b0440e603e30875b9d4d337653806661cf928004fc3b790bb1a5808feb8fa8301933ec67272bf39f19","ssdeep":"24576:yIRCPkr0sjn1Gi1Gwd7iGkNO7CwH8KavtnkPFJvLwbLyglwRL1:yMCG/n5Gy7iGkNOmoaRk9lMbvlw11","tlshash":"ff252391ec2168d3d49226f4c33b4aa84015eebb1659e12f5d71f27eab70f4dd30a263","first_seen":"2025-11-20T12:33:07.040223Z","last_seen":"2026-02-14T00:24:47.927406Z","times_seen":7,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/bitcoin.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/bitcoin.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JeZ00EGKLJ8%2FOjSU0jZEz%2B5rlSpGqNcw1wtuqJccfmNe8qBiNdcAbvcyGKijVxWtsHlIcw9AkhAV7PE494kS0nT%2BS2NvcLkgrABCbUAY\"}]}\r\ncf-ray: 9cd86bfe1859b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8349,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"050fdc0a5ab78cf933e179e594dc59f1","sha1":"afe95b5ccdd7e4332452b89171bb3a88deaa6ce0","sha256":"bd0c7e456e93f58ba5c74eb81ab6a7a4cecf02312d18df49043238f72490193d","sha512":"2009e207bb237bd98d78850a48bbbac25cad7f177968478400decc01c1c392b16b388f0b1f2499cbbc4334c195029710d3c291c7345c24d34d1a5891a7c63b9c","ssdeep":"192:QHoe66M/u81vs6HbSVEyYP+u59xMb/IJKs2g3tsjVIxd:oWz/u0Mq9oMKs1iWn","tlshash":"c302b6f97796a3f4d402f3f5d8189415ba1f24fa6f65cae8c3576d8af0420ad9d88c80","first_seen":"2025-11-20T12:33:07.016233Z","last_seen":"2026-02-14T00:24:47.928057Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/tron.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/tron.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjI%2BUb1xyg5KSoQxvcFk13walDO16aGNNYe2PLreZKhr7460v3shN28BaKv5ejl2bcCQOMW2K5POZV1s6HIXU7fvrSfFeY6rMl4Ci5DV\"}]}\r\ncf-ray: 9cd86bfe285fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2111,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50b335796a43739f53b9732e9b167c99","sha1":"c26fd4cfa54526cecb12424858e57976b46f379f","sha256":"bb42d2e24070425d1df58e434487095c19880bf0279137eee2948ce03854016b","sha512":"3904f93cae000daa5ca9599468c2b9f2fe40069d34c12152bcac406f5d2a3b2b264b7d1140797d80f36eff8807680b3f14fefb08a65d19d5a74c427a19b2407e","ssdeep":"","tlshash":"cd4105a94344a3d84901c7a8c83c5961713f31ea7fa4cea1ce52b74ba21e19e1dedcc0","first_seen":"2025-11-20T12:33:06.995862Z","last_seen":"2026-02-14T00:24:47.928876Z","times_seen":7,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/assets/index-DKSPX2TN.css","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:17.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /assets/index-DKSPX2TN.css HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/css; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iikJX1i9Qf%2BlZBu1gFxwVGdoZ4YKf6zFdpoetrZhA3z%2Bu3NHUqa94%2BHsv5F08E89diO%2FqmrUKKWlmFraC3X1rK%2BvLZlubNiO8nMTcg5f\"}]}\r\ncf-ray: 9cd86bf84f33b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100444,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"89719c98189efe351b650ffca8cdee64","sha1":"6d058c9178604026ea851ff1cbe569ae30f94efb","sha256":"516a25388c9dd5497ab5d322db3fd2261dcba27e5e0b7093367e0e01311765da","sha512":"1a829bf01ab5078102428dad541f82fe8ef71811fb446caf4f4041bd34eee0f190e604be1c9cc821b932b146e96449dc1eaf546f5348edcacb9f7fe43e1c0f55","ssdeep":"1536:OFSkIaxhvG8cjWHRCWaFsEh6/QPudLAO0uql83K5ah2w:eIaxhvG8cjWHRCWaFN6eudLAOxql8a5g","tlshash":"6fa39360f225d53bbd23b9bd63acf44ca21aa1c1de5297edfa22601153c36f62863614","first_seen":"2026-01-10T21:08:37.484893Z","last_seen":"2026-02-14T00:24:47.929519Z","times_seen":6,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@100;200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@100;200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 00:24:18 GMT\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18248,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"439fa0c3a18151951b917f4c066d4618","sha1":"6ad61049c20e54cfee23f8ad23b997432c6d49fb","sha256":"c0e8d4ce3bde4bf9a196d76cfde67bf9cec57b502fb9e79463f0471649e165c1","sha512":"6fe5619e74c58c8d79e94dac294052faeef911fb66bd92131aba3b4a7116b2470fdcfe09bb10f1c9f2708b6bcc117a6e2fcec2ec41be116e649163a54c1c03c8","ssdeep":"192:XpUnpWpI3SpVpWNp5UwXI3LOWmKUXwI3kNWFrU+9I3ZAWYEU9+I3qnWfNU0bI3HL:XWnE0SnGAb2vAHSrwjGvYnL","tlshash":"8882baa1042b9440ab472cd273cfbe355e5e61167081d6bacffe1898adabc360374b4d","first_seen":"2025-10-05T18:48:25.541997Z","last_seen":"2026-07-04T11:53:58.283429Z","times_seen":35,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/ethereum.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/ethereum.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7px4pyiSQdcpgsmfKk8ASpauBsEPjXAUyNnnpDQSng3pYNxuRPUY%2FUfpfPeHGBJhyfluFf3cJo6b0kCqzkU%2FY08LP9cfgvb9YLdNx%2Bd\"}]}\r\ncf-ray: 9cd86bfe285bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11160,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"194c83272509ee55248bf772722da969","sha1":"b8e4eb50f1449f813e276e171d4ccf8b7ae25f31","sha256":"a438bfc96dccff9e92900df18ea93fbdf20fb7715f0f53c0e7f42e205031c9e8","sha512":"114e96c7ba0c62be2fac53119485facfa13138bf2c63d62aa22d27619b15efc04730dd0355bb09cccacd5c08f6810ca82ca3f7bb0e7e9fe641337d4aa2b75df8","ssdeep":"192:8j2pGCmkTOI8YwMm3izQs3wC5DgDTVlU99VO9BnT9NquStI6/F+nurqtJ2Jcz2d:8SpJOKw2Qs3wC5QlOVWP+3+GJ","tlshash":"0e32a5efb794e1e8b406f3f4e51684a57a6f34fd6a37cf60c3a52f59ea5204c9844880","first_seen":"2025-11-20T12:33:07.005366Z","last_seen":"2026-02-14T00:24:47.930845Z","times_seen":7,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/assets/index-CGGpCbum.js","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /assets/index-CGGpCbum.js HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVwK1PM50Sl7RkQqrBK8ypLO88A5kzHsaF7EUCxDD8VuWYuI3HyZPIkMZJOzYOLLNlicEhbRZFf1Y5VZwgOGtp4%2FZ4R3utOQ%2B%2B2kvj5I\"}]}\r\ncf-ray: 9cd86bfa0f7eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403280,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"be09a06eeb08d6fdcb9067b810e55f0e","sha1":"712771b25c8df4c287dc1ea838bb4f25ee5e702e","sha256":"3f7faebcf782052a52092e7d220152e6537c531bf42ce18e7826dcdc1f7f36ce","sha512":"1f34f31a79be6520800967345a97cc388ae4df755ca35a96035a84ae0d12f643aeef26f709b26c8ac849aa41f9ddc20e1d5de3feea1c6a3110b79465899811ca","ssdeep":"1536:vSAslolLoM32F6kj40NbiY2UKkKsKLFqlt86gkLINkHVuN02MYYoyr8nLjND1M4x:rlId8XY8nLjNDW/aH","tlshash":"7e842294c392296bf844cade8fd6180c3c9e17ba9ab2cce5964d473a40f84cd365f365","first_seen":"2026-01-27T11:14:18.661749Z","last_seen":"2026-02-14T00:24:47.9313Z","times_seen":4,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/illustrations/monero-exchange.png","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /illustrations/monero-exchange.png HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/png\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7%2BnbzxouFIRksdJUFykO578KRGRGQ4rq%2FnSlfV1bSAao6eC96pqKE%2BzCDKcPRreYhCwaYFdlbrJRSMRvNTnm3z2HFvCRgu9wxYdMDHg\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd86bfb6fd5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 530 x 250, 8-bit/color RGBA, non-interlaced","md5":"4e7271e4d05843ccbf6c2c98a3e8cdca","sha1":"cb2fc166d2af582ed84731473d4316cf4e95c41e","sha256":"2a572c6a0355c5218ccf69724a328dd0d1ea2efea18b4166d85035c00fb35fac","sha512":"e8d287557f46c998c5c9b80ab7770ef917f1fe6f6851aaa258a5e0fc59cf0cc65f0211ec390770d228ceaf729d92429fbd86d61202609233a40ffb82e81df82e","ssdeep":"768:vN4svRdiiKG2ChsW6y3puA6FmZDDZHm7fUQMTldqOWj9Fn6QYguQiU6AS:vN4sDvKSOpy5YMNtHm7f7OWxF6QYggUk","tlshash":"4023f1a6be38843bb9838f6025c21f4a153192d05bbdac07d105c97c3f5e27e7a69375","first_seen":"2025-11-20T12:33:06.969884Z","last_seen":"2026-02-14T00:24:47.932019Z","times_seen":7,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/fonts/Gilroy-Medium.ttf","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /fonts/Gilroy-Medium.ttf HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/assets/index-DKSPX2TN.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: font/ttf\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tr63ORz9NCbzoXTaHYPtFq3o3S9NHs1MEk8yRZvu5I7MPzxEF1XfuvTooQeczjpRFgKJFWve3P6WlNENjUfpCgoumGBEGzhOaUQ3tJZI\"}]}\r\ncf-ray: 9cd86bfce827b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143724,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 22 names, Macintosh","md5":"c83281ae1ca703d0741a770ee7e7c091","sha1":"d7f893124bd4fff78805e69df31385ae113368be","sha256":"7b3c84352c6a0d8a3479b528b8d8336ddb1cef0da8b81dea0e41a930d56523fe","sha512":"11223ee72a122c347c1d2864676e8a05cff295c8739133aa3cccfc0cd64d73b7730b33eb94ea83bc32feb57b041ed5cba78eb8c65545f4f1e8983115eb087fa0","ssdeep":"1536:vYERginzY4PwU0Wll/wDLufOG89gTjtlqaIgjzpe74nf4wk5bzovhlUmDRXxMQnj:qinzYrUvyPuf49ytcjwktYwnnIdbRd","tlshash":"d8e33892f645735dcf535c358961d2acdfa19d3fedc807f7ae823a6201404b88aa1e8d","first_seen":"2023-05-08T14:08:29Z","last_seen":"2026-07-24T12:45:25.650546Z","times_seen":586,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/ripple.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/ripple.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8owtjLtN9HEuVO8dI2788s3oSgjzGSyr2S5Z8LcUqpwPSl9kECGa2mh%2BBeyzLLCToLYzQZQK7ZzL%2B0%2FmiQyQ6OBJYU8iAweXVKTPwr5r\"}]}\r\ncf-ray: 9cd86bfe2860b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4270,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4e05bccf04ecd98be3a59326d103dbe","sha1":"e40759c1f0454a81273e624f0eab54b10205237a","sha256":"87c5676201090480e1bf438de5826015f16ada0769f4696fccad3c2ca383d0a4","sha512":"e958fc96d1e39c836f93af7da52d6ca97c437c2daefa75093bfef068ebf99f38338d0fe325c4919f43bc02ab5b47f4d77c4fdb9b9bb02a2ee22a267ffe472710","ssdeep":"96:C9sF5AfyV2MK2Pt8JAjjSkFEkK2Ct0DTR+NmwMPceTY:CenAfyVJt8SSkf9TmMNTY","tlshash":"5091a4f15388f3e0750bfb91d438112ab9af74f9af22cd958a76be49630c028099ccd0","first_seen":"2025-11-20T12:33:07.036288Z","last_seen":"2026-02-14T00:24:47.933431Z","times_seen":7,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/api/auth/get-session","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:19.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /api/auth/get-session HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60Sez6u7R4KkyD2Vh4vtD03v3HyvLVbpsYByAPMcnnao6Y7hiyxumcR7EUZztzw5x9fQKJkiLZUqR%2BJUHvumTwM4B04teOeViNcfNXoi\"}]}\r\ncf-ray: 9cd86bff6895b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-24T14:51:41.660525Z","times_seen":277534,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/illustrations/monero-exchange.png","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /illustrations/monero-exchange.png HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/png\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mE9kTO%2FDFUtpRbgAZnaR2JlDoZRAL7rH7hjhHmHFkneSu2Aog7HJe9myQgNTyvDJbk%2FsN56k7etK5EFfiWIHmR2O8sf%2BWBxOFvl0msHF\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd86bfc5812b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 530 x 250, 8-bit/color RGBA, non-interlaced","md5":"4e7271e4d05843ccbf6c2c98a3e8cdca","sha1":"cb2fc166d2af582ed84731473d4316cf4e95c41e","sha256":"2a572c6a0355c5218ccf69724a328dd0d1ea2efea18b4166d85035c00fb35fac","sha512":"e8d287557f46c998c5c9b80ab7770ef917f1fe6f6851aaa258a5e0fc59cf0cc65f0211ec390770d228ceaf729d92429fbd86d61202609233a40ffb82e81df82e","ssdeep":"768:vN4svRdiiKG2ChsW6y3puA6FmZDDZHm7fUQMTldqOWj9Fn6QYguQiU6AS:vN4sDvKSOpy5YMNtHm7f7OWxF6QYggUk","tlshash":"4023f1a6be38843bb9838f6025c21f4a153192d05bbdac07d105c97c3f5e27e7a69375","first_seen":"2025-11-20T12:33:06.969884Z","last_seen":"2026-02-14T00:24:47.932019Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://darkchange.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:11:20 GMT\r\nexpires: Sat, 13 Feb 2027 03:11:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:18 GMT\r\ncontent-type: font/woff2\r\nage: 76378\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30092, version 1.0","md5":"fa41c43a3d8e68fafc0ec15acca8b6fd","sha1":"adbdfd9a78699a96a9705fbeb3470c2c653dedf0","sha256":"2ee17598a98d8a59e4df8152d015bec9ab8e4d5672cc0ab42bef806b568e3971","sha512":"936da7cff6f59919a72f564c6f1d3b78e1a3be000fb1ca712abea3266687846d53c25dcf1d1b78221c985d4e96dda91ced26a221d85e4521e3d661c71affa216","ssdeep":"768:eHpJRc2xEL2BUo6ulIYw1wXomue+I4oOf8oSY6fg:gp62Uo6kuOYmuTaOfwYmg","tlshash":"ccd2f18a71f9a1f874695de0b8ee9b54bf8ee3221ae7745610d10781d6e13083bbcc35","first_seen":"2025-06-04T20:20:25.58114Z","last_seen":"2026-07-24T14:38:39.030825Z","times_seen":2809,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":81,"dns":1,"connect":7,"send":0,"wait":9,"receive":10,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/assets/index-CwAURFwk.js","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:17.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /assets/index-CwAURFwk.js HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aw92Fn7cLDEDOOJoANo83GFoVapqU2uO40AlMC4mjhT6%2BEZQMKErhm0J4lfyZR0jYaS3k9zHc2ZXkFWAKARBtjrQRRmNfwb%2B3r0z%2FSFL\"}]}\r\ncf-ray: 9cd86bf83f31b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":469986,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39664)","md5":"7326b6895a4fe03bdec3f73fa03f2e02","sha1":"594bd808f3fa8a7dbe31f264e691e971c937d776","sha256":"43c80f0b0ab5e9b7c8d2d027d8f4fd32d65a8b3ea161ad79a16fe8723ab16d95","sha512":"1154b0a9bdeb32d8efdcdbe95dca0f2e16dbc193ec4238887eea6d06a28c153337070ca07d80c397da334af6b0a6a6576227ff7b7227d33fcc045a53a4cbbfd1","ssdeep":"12288:CBMbZLUk1FUakPil+Axmvt4Oncspg0GsIrPfhfFjRB5IW5Rf7TrjOyfGkYXmsiu:CsfDUakPil+AxY2Oncspg0GsIrPfhfFE","tlshash":"69a43bd872a9b1255be345e4407f0203b2392966740c88a4f13dedeb3a7544a51bbffe","first_seen":"2026-01-27T11:14:18.676615Z","last_seen":"2026-02-14T00:24:47.935312Z","times_seen":4,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/assets/index-CGGpCbum.js","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /assets/index-CGGpCbum.js HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/assets/index-CwAURFwk.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/javascript; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nlyxxTDZFMbl%2FMCLrB2rNmDCK2tUOXTX7oTyp6H%2FB%2FHaARCKGoCRorq9IGuHlPnucgWoFKZ3xBOJzvKu9%2BUbZRNDGVEG93o2pY52odLa\"}]}\r\ncf-ray: 9cd86bfa6f99b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403280,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"be09a06eeb08d6fdcb9067b810e55f0e","sha1":"712771b25c8df4c287dc1ea838bb4f25ee5e702e","sha256":"3f7faebcf782052a52092e7d220152e6537c531bf42ce18e7826dcdc1f7f36ce","sha512":"1f34f31a79be6520800967345a97cc388ae4df755ca35a96035a84ae0d12f643aeef26f709b26c8ac849aa41f9ddc20e1d5de3feea1c6a3110b79465899811ca","ssdeep":"1536:vSAslolLoM32F6kj40NbiY2UKkKsKLFqlt86gkLINkHVuN02MYYoyr8nLjND1M4x:rlId8XY8nLjNDW/aH","tlshash":"7e842294c392296bf844cade8fd6180c3c9e17ba9ab2cce5964d473a40f84cd365f365","first_seen":"2026-01-27T11:14:18.661749Z","last_seen":"2026-02-14T00:24:47.9313Z","times_seen":4,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://darkchange.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:11:20 GMT\r\nexpires: Sat, 13 Feb 2027 03:11:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:18 GMT\r\ncontent-type: font/woff2\r\nage: 76378\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30092, version 1.0","md5":"fa41c43a3d8e68fafc0ec15acca8b6fd","sha1":"adbdfd9a78699a96a9705fbeb3470c2c653dedf0","sha256":"2ee17598a98d8a59e4df8152d015bec9ab8e4d5672cc0ab42bef806b568e3971","sha512":"936da7cff6f59919a72f564c6f1d3b78e1a3be000fb1ca712abea3266687846d53c25dcf1d1b78221c985d4e96dda91ced26a221d85e4521e3d661c71affa216","ssdeep":"768:eHpJRc2xEL2BUo6ulIYw1wXomue+I4oOf8oSY6fg:gp62Uo6kuOYmuTaOfwYmg","tlshash":"ccd2f18a71f9a1f874695de0b8ee9b54bf8ee3221ae7745610d10781d6e13083bbcc35","first_seen":"2025-06-04T20:20:25.58114Z","last_seen":"2026-07-24T14:38:39.030825Z","times_seen":2809,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":148,"dns":1,"connect":7,"send":0,"wait":10,"receive":4,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T00:24:17.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 00:24:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Byn53Mf67C1z5rAVNGenA1a%2FHb%2FOJSbK6fN05kbuv91b%2BaoCQhcxIRHjVck9tT%2B9WZhbaQ8zq3ITTqHH8VmIQnOgQa0ZeeeWZioWy2UP\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd86bf5fbad8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b59979c3df8afbe8f6554d909aaca4cf","sha1":"e51241a472f2d82abf8f8c5f712c8ac1d94d2149","sha256":"9602f423cb2a50e440cd78ef7ca2784feae393eecc9fdc770609929987ed6820","sha512":"d27e5e9b903fe720cdce98367e13ed7b1a154b831ba0df4560dbd1d93afe524dcd04824ea729fa6da1c99f3a36973b87c154143e84f9e0317642e8e67d80892a","ssdeep":"96:bkJvttM7IslGKv5M7IsfBkL+P1WcO4B+DYwXZQ38Iy389ay38KCq8CbgZZg:bkJvtwlGysfX19/+8wusIys9aysKCq8+","tlshash":"98c100a7a5e0dc2652e1407819f2b448993e40c7c6087e4bb3dc51de0fc9ae989fb79d","first_seen":"2026-01-27T11:14:18.656166Z","last_seen":"2026-02-14T00:24:47.922932Z","times_seen":4,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":48,"dns":28,"connect":1,"send":0,"wait":54,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Instrument+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:17.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Instrument+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 00:24:18 GMT\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3864,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dca43b277460c23e27a9a14c5096cf81","sha1":"dd378607f32336115432eea3c36284f5672ac5ea","sha256":"107a699c736cfab5d0c7232b782bea6c67a51d69d0b9ee6edfee559d0ab5133c","sha512":"f91060a7721fc81e286cad521858489ca7e1dc89e55f9cd874a88854697b28c528ccb651e40add13996449f23bca3843ea8cdd2d48cf043291a836984259dd2f","ssdeep":"","tlshash":"a581eda0042fa1149b839dc2239e7f36ae1ea1603441dc259ffa24a8fc5ed794372b4c","first_seen":"2025-09-19T14:45:38.484925Z","last_seen":"2026-07-23T15:14:05.340201Z","times_seen":216,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":85,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/illustrations/hexagon-network.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /illustrations/hexagon-network.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gW%2BeWawsjXQvZBckb5w99Dl6iuuLkkyQptgpvoi0n6Zy77aZIlk4eu8h4497o%2BA3issQP7S%2BmMJe57gISRIvfYxyG2XqResztVI9j%2FAY\"}]}\r\ncf-ray: 9cd86bfbeffdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129775,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e9ee331975c0d3743dd79824b2dfc92","sha1":"083bbc9fa832080c3fd1a036c0ec0aaeb2b881a7","sha256":"745b4113dd37d7bf4b348fd2c27588acf413c4e865416e59f0c28154497f8d3a","sha512":"07bc44670dcf0f36c297e95c90bac8bdcb8e3d1ca8f30edea4bd1e7f5aa0e5c071b79edebfcbb58bc531be2071c94f3dab0a1b35da784efe34ffbed1e8cfdd16","ssdeep":"1536:nS5PTpMs3/ZMGfMGnMGrMGQMGjFQojGxU:aK","tlshash":"0dc352adb764ac9edb99c2c8ef80c4a9161e81b7e5c14180c35c7b2f5878d85a93f2d1","first_seen":"2025-11-20T12:33:07.021041Z","last_seen":"2026-02-14T00:24:47.937981Z","times_seen":7,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/illustrations/kyc-free.png","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /illustrations/kyc-free.png HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/png\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpdT6s%2B3FrJzDzINUKW9pLGDafQbdBwVJwlWvTujjZa%2BtmDHwKQWyZgzcmY336VB1rMdJ5qrKpZN7Zxo2bpM%2Fw3AhmkpDjIaYjISFnAx\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd86bfc4810b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 530 x 250, 8-bit/color RGBA, non-interlaced","md5":"0732b07759b2ce99b92292bf62a0e5dd","sha1":"79a5e9a75770778160fca3e7b2686c73d639494b","sha256":"686e3397d5e7ef040072386ea5f21bfe56da909b90ce6e8ff6572559560585a0","sha512":"4c3c94af79f3abc9fedf13658b111cb4ebd5cf775d8b517b29792ff0f8ae7303d47fddff25f79b21991fad88b5255245c675ea7088145309307712cd8be94923","ssdeep":"768:EqnAH3O900rYwY5zDZGubkEF/i4YyCINxG3n2kYyW1ZvhsWrcZNOm+K+psM:tnAH3Q/r1YTPwX9Iy27yoxhrraONK+pD","tlshash":"b803027113081caf6abf6f98cf935337b357109b51f42a9a387cc915ae40d6da6889c4","first_seen":"2025-11-20T12:33:06.986503Z","last_seen":"2026-02-14T00:24:47.938964Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/tether.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/tether.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WM0H1qf3ZlBr1mQOqWn0GZYqEVSgmxLQx%2FuthzQP245qvGoJJFhoJqusBEHAB%2FtDG9NaExcE%2BqCGEumukc7QZIv%2FYckJbTCBqb1jaoEl\"}]}\r\ncf-ray: 9cd86bfe2861b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b60f7fc09c30618d450cd0a206e22f34","sha1":"452f2af4562d1d084945b428ad654508711ae3da","sha256":"467f52b6fada63828bd64854b5efe930555a35110cf460fad57f083a7f16e106","sha512":"7de0358e8647124bed8c49f9e5168ccbad1ac0436d0beaa34656b9fb19d44713311ab40f885d090b66b009df457f1fd28a1ec6c6dc8fbc945bf9fec51d325311","ssdeep":"","tlshash":"da6152ca57d563d09907e3f4d49458f0792b24fb366b8ee48733af95b61605c4c8d8e0","first_seen":"2025-11-20T12:33:07.006575Z","last_seen":"2026-02-14T00:24:47.940733Z","times_seen":7,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-logos/usdc.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-logos/usdc.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kc%2BubSC42ZcAnB52BoTWD0EVhA%2F2vIYbDW4261mnda3T82oIjUo7LB2CKZsEiz4yWDNaku5rOUSNr%2BaLIiaHXXuYjU0AxnefJ8m1bxmv\"}]}\r\ncf-ray: 9cd86bfe2863b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3efa829825e0aafe584dc38340df3521","sha1":"419b9a5a76c7514d53b6a8bb28166596a240073b","sha256":"ff91257f6dbb041edb366426d8212025de30e743d12551b138a661ef3d79d51c","sha512":"f6409425daf0e428dad695ecf183a7c4ca3bff043c5214e796eac65d8db5acecfedb3465ef3d5629fc5be9dad00de2f0b21c8b51633f8b65e8c03486eca641f3","ssdeep":"96:Kj7E2ORa823AvAL67FCkEc/Pa6jmWx/nCWyTKhtjd3J7RCIhd:KjY2N823AIL67F/Ec/Pnj9x6hOhtZZ1p","tlshash":"32b176e163e4b3f4960af7e4d9189425797b24fa7f92cfa4c365bd44a15101e88dccc4","first_seen":"2025-11-20T12:33:06.972648Z","last_seen":"2026-02-14T00:24:47.941773Z","times_seen":7,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/fonts/CircularStd-Book.woff","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /fonts/CircularStd-Book.woff HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://darkchange.net/assets/index-DKSPX2TN.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/html; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9O%2BpAPjqXYs0puYCcK8%2B8iQtDQyuqVcPZepaXvmw0gSy2DeipPRAoZYR35TT%2B%2BOh4De9iarEPvLq9ajSoChxoF5shgebcsevfmAgbz1x\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd86bfe3864b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5689,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b59979c3df8afbe8f6554d909aaca4cf","sha1":"e51241a472f2d82abf8f8c5f712c8ac1d94d2149","sha256":"9602f423cb2a50e440cd78ef7ca2784feae393eecc9fdc770609929987ed6820","sha512":"d27e5e9b903fe720cdce98367e13ed7b1a154b831ba0df4560dbd1d93afe524dcd04824ea729fa6da1c99f3a36973b87c154143e84f9e0317642e8e67d80892a","ssdeep":"96:bkJvttM7IslGKv5M7IsfBkL+P1WcO4B+DYwXZQ38Iy389ay38KCq8CbgZZg:bkJvtwlGysfX19/+8wusIys9aysKCq8+","tlshash":"98c100a7a5e0dc2652e1407819f2b448993e40c7c6087e4bb3dc51de0fc9ae989fb79d","first_seen":"2026-01-27T11:14:18.656166Z","last_seen":"2026-02-14T00:24:47.922932Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/assets/index-2b9-Tkam.css","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /assets/index-2b9-Tkam.css HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: text/css; charset=utf-8\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKW4MQam3bY%2FT9Yv7J6xKS4TwIcEw9MmGhBAZURZvwC9MVshkEyqQiveWeJorneSNtmsucIhC3WeYTmLwe8ePvvYVKf3DC0UZAl80W%2Bu\"}]}\r\ncf-ray: 9cd86bfa0f7db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3181,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3180)","md5":"4d1d6a3c5e53a9faa397fde719a038a9","sha1":"b53005c37f44ff8eac7267b253cddce7a95b2524","sha256":"ef23ae16e9454304b622b839e4f47868208f4dcd684ec219f4f86ff81760e286","sha512":"94cceeff62bcac7eba062ae6b9d81b1f87fa5892adc8ffdd972edb1fa35cafae479239669c351ff44d3e9cbd92ab55510af65a0449f2d207e7cdd465472886f7","ssdeep":"","tlshash":"d761712d890e2cedb533e55ea5dba558c124d183985e073673b2523c08c317b22bfe17","first_seen":"2026-01-10T21:08:37.479994Z","last_seen":"2026-02-14T00:24:47.943023Z","times_seen":6,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/favicon.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BASkHbOOd6sGPSF3hdSWKTXR5oaf7eKyUWMOuJry%2B6SJ7vDQ%2Fpb8woV4pWWyyP6tJL5V%2Fh3X9GtwMQhbTKvBMldFiS1y%2BsIXXeMuCy7L\"}]}\r\ncf-ray: 9cd86bfaefb2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1858,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2335719348bb9c812b0b4f622787277","sha1":"b5f058f14768511b2c949d4f699069c96d6a87cc","sha256":"61218aca550c43131d3d086719e05a245199336154d09c80b182fa0c98d5dfb1","sha512":"15af176667eb411847d43e1db14bb747c96b289d951f5893c1b025b310e2fbb0f937cc450a0f31d6ccb4b9c48c037ae5747f27dc8cf33e1b9554c39fd0160cbf","ssdeep":"","tlshash":"de3144cd3f64954455dc8fe67f21e09c5d67e0a1498d0892c05c9f8c98c1c7e6a06912","first_seen":"2026-01-10T21:08:37.46614Z","last_seen":"2026-02-14T00:24:47.943935Z","times_seen":6,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/illustrations/kyc-free.png","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /illustrations/kyc-free.png HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/png\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4DydFrzljfG3hHblxEYrtIUqWV%2BxIDq%2F9yduzpsXBTvsSp7ZF4Q6S6GISkuzzxaq2IC3A20Hitq6oT%2FBMzxDzfcboFBFvtDM5jh8ShP\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd86bfb6fd4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 530 x 250, 8-bit/color RGBA, non-interlaced","md5":"0732b07759b2ce99b92292bf62a0e5dd","sha1":"79a5e9a75770778160fca3e7b2686c73d639494b","sha256":"686e3397d5e7ef040072386ea5f21bfe56da909b90ce6e8ff6572559560585a0","sha512":"4c3c94af79f3abc9fedf13658b111cb4ebd5cf775d8b517b29792ff0f8ae7303d47fddff25f79b21991fad88b5255245c675ea7088145309307712cd8be94923","ssdeep":"768:EqnAH3O900rYwY5zDZGubkEF/i4YyCINxG3n2kYyW1ZvhsWrcZNOm+K+psM:tnAH3Q/r1YTPwX9Iy27yoxhrraONK+pD","tlshash":"b803027113081caf6abf6f98cf935337b357109b51f42a9a387cc915ae40d6da6889c4","first_seen":"2025-11-20T12:33:06.986503Z","last_seen":"2026-02-14T00:24:47.938964Z","times_seen":7,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkchange.net/crypto-icons/bitcoin.svg","fqdn":"darkchange.net","domain":"darkchange.net","tld":"net"},"ip":{"addr":"172.67.152.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkchange.net/","date":"2026-02-14T00:24:18.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkchange.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 13:33:13 GMT","end":"Thu, 19 Mar 2026 14:31:54 GMT"},"fingerprint":{"sha1":"9A:B9:9A:51:23:5A:7C:8A:A5:1F:EA:62:4E:A2:E6:4A:0A:2F:9E:FD","sha256":"3C:4B:73:A1:9B:BF:59:5E:5C:C0:FF:E0:7F:EB:73:37:49:F5:2B:70:27:F9:06:F9:BF:7E:C6:5B:E6:B3:E0:CA"}}},"request":{"raw":"GET /crypto-icons/bitcoin.svg HTTP/1.1\r\nHost: darkchange.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://darkchange.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Content-Length,X-Total-Count\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none';\r\ncontent-type: image/svg+xml\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ndate: Sat, 14 Feb 2026 00:24:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 00:24:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pPPgChF8w99nnER6oOq6uhdK7vTSITbXgajwNhg%2BOKRBWVAimZ3lrXuqV97yHS5WbU1LerxmhmEGEJuY8rjr3fNy03b7SyhP9gQs5er\"}]}\r\ncf-ray: 9cd86bfc6816b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b8ebabff78fc0e1e27c86e0acd5689b","sha1":"362e6b1262d4bbf6804b7b20416f8defea0225c7","sha256":"2e74fab94b80eea9ac10b062442b5c050f1bf201d561eef1839cc37ff8b723b1","sha512":"a79ae1df58409deb5051280b378bad6edf5e3c6d3401f5c3c3e2db7c7b1728f801dbcbdae3669fd17482a1ae40623354265d4430dc091cce65495c8b7cfcda5f","ssdeep":"","tlshash":"aa3151ffe7c061f0d64ac378ee2684f8b84330792b6717da48906e9a63b115885cdcd0","first_seen":"2025-11-20T12:33:07.038409Z","last_seen":"2026-02-14T00:24:47.92679Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"darkchange.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"darkchange.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}