{"report_id":"6729cdde-8034-4895-88e4-98718253464e","version":6,"status":"done","tags":[],"date":"2026-02-14T10:08:53Z","url":{"schema":"https","addr":"plus-exchange.com/","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"plus-exchange.com/en/index.php","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"title":"pulse-exchange","dom":{"size":37537,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3295)","md5":"cd64e523fc6894bed0594d4e08bf9348","sha1":"bb9d1726671107777c56af6562e7bedf7501aa06","sha256":"ecf140ea1c46b92a21cc355e3e1ad099713dd9da56eeb8c76a4f9900036a2053","sha512":"f5248ba260a8e55ca50b19273c21a3e2df57d174ada976f5104438642d823a98881cf56a90be77b2e7361d98c330719aff20d4516fba369bdfe9e3e74e2b4b0c","ssdeep":"768:jGW/9rof6ABRUIMcpQMQ2PsnnfV5kAY4SsYSeN:KW/9rof6uUIMcpQMQ2PsnnfV5kAY4Ssg","tlshash":"40f21d3080f291b3815f71d6ac28ab236de2d713d6461be276fc46ca5f82e59cf1345a","dom_hash":"domhash7f7e302d0e2e9f75981183dd896ff6d4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"plus-exchange.com/","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T10:08:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":2,"received_data":14293,"sent_data":917,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"plus-exchange.com","ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-02-12T21:21:20.149907Z","last_seen":"2026-02-12T21:21:20.149907Z","alert_count":56,"request_count":56,"received_data":1191272,"sent_data":28895,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plus-exchange.com/js/support.js?v=20260215","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8caf8a2b4b4e6bf292157a52f46d7dcf","sha1":"689c05184a7d1490558cbf9d7b313adcd1cf8320","sha256":"8ea99b3ce31ffe53b4317904ad7775613a39a623598c6dfa53baaf5ec9c553cc","sha512":"c6b8d970d8e3c607b2c3a31b16048ec7513e5aa113ffa97f4464560d5e64b8cc9f88c725b654a28d1a36e5f4e78a682836d99e9affb8e5bde5c0f8b7690e88c8","ssdeep":"192:EicwJn9yiB3CWWXJgwNX0IW8xivQfiTiuViyijxILiuejiJXi2PwIiL0zW8EgyI8:EM9yifwTOIBRiTi6iyi96ibjiJXi2iY0","tlshash":"4bf1a35a45fb186001db60af33972112393290073689d941bfec85990faec66f5fbbed","size":7957,"data":"","first_seen":"2026-02-12T21:21:24.785196Z","last_seen":"2026-02-14T10:08:57.286146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/js/libs/wow.min.js","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"164b265e6089f412b7927848018ae6a1","sha1":"1717e6b487126c5c3e992d47dba4c6c10f4529bc","sha256":"81c4cb0bc57b5cce1816bd704f7a2b12ec2b143c6a067402644d4a139b273350","sha512":"956bbda2e4f3069c72d8dbc003d04d02a6026428beb9b9c8b0b78eb1dcce9b73b6f619b5558a4eec9c6d681eaec6ebb45e4ecd504a77ef9ad69b9b95373a3270","ssdeep":"192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:iEE/Amu6qUxVBxGkAI///IR","tlshash":"58f1bba5374a70718a9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","size":8157,"data":"","first_seen":"2023-03-07T01:42:37Z","last_seen":"2026-06-08T20:38:44.577544Z","times_seen":3044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/toastr.js/latest/toastr.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b36f28de584845317de40a7219c82b1c","sha1":"6de8657c8782561bc023478ab708179ed846db1a","sha256":"ddb96c25de07962ffbc0243e6e68177ce74aee9fd950cb4f5d8d3c8e6c524a09","sha512":"54477e9eadb90a447aefa3bea4b0670d6d3d47b5505fd31d8a28f4e768150a9e72547de31ad1fbd07a3f514bf89890ec11d4efa91085660d0d2868a88c69d40b","ssdeep":"96:LozfdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrI:Mzf4BtcvvRqIQcNa74ccrI","tlshash":"f7b19384b220bb8b5b731169919f144b937673b2ccce55007639a5987e7082c97b7fdc","size":5537,"data":"","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-06-08T18:50:53.681074Z","times_seen":5658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/js/libs/jquery-3.6.1.min.js","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f1950538c6051b90dae76087bc65424","sha1":"f88af5a8061ad3170d0a7155636e798797ef9656","sha256":"24c7030c50c1045cfefddac2d403f4bb2043b34183f6887f5c88a3e12e0236f9","sha512":"dc52b97ac0efccd9bce32718d84a8573153688329455405411d52fc0b5d3dbbaaf9e038b57921bad43115d151994123948739b329ab4713d0e60b26a67efcf85","ssdeep":"1536:RjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvv:RdeIygP3fulzcsz8jlvaDioQ47GKK","tlshash":"9593f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89666,"data":"","first_seen":"2023-03-09T23:12:28Z","last_seen":"2026-06-08T17:12:06.247954Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/en/index.php","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1f3a445f1b39fcc209283914ef3e637","sha1":"43d0fde9068717c38486c47a8451c08f349c5546","sha256":"4a9edee2916da7237348ad55bc21865e5cc9f08c88ffa40e80c33353ba3a222d","sha512":"f2f12f6eec77c8aa3090e3081e3eca70665fa363facf65450e644133a827105079c46fbf0f58b457c681c901fb036cce6647c8c514e990f9f3ace6db0638b50f","ssdeep":"","tlshash":"d3d0128914ea580040637165071b735539378073128a5500be2c42903ff913fc4fbbdc","size":224,"data":"","first_seen":"2026-02-12T21:21:24.835401Z","last_seen":"2026-02-14T10:08:57.338404Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/js/script.js?v=20260131","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69fe4bc446f010a212ff382dd1fb05fb","sha1":"eb7bd80d87339359b190f0161e418e61afab48b1","sha256":"06b0d692798df920f7dacb0e756ff1fd0ada6b2718043c33f44e58a4babfd513","sha512":"ab6985e762b905ce2c678005a693270c299c213b6b347952455340e7424c9276373f11542b5d1a081a3f9823ca65ea5c7573952ec1682b3495a405604b7414d2","ssdeep":"384:bMxAZTNKnALe/ArLHf0AvDWk6KSEPW/2PQ+f+YdZzNYgMiz/:5EnALe60AvaktSEPWOPQ+fPdfYgMiz/","tlshash":"b1825044714e52a2c47b72b69f21c124fd31a63b87028b06ba7da5e81fb5a50c272f6d","size":18314,"data":"","first_seen":"2026-02-12T21:21:24.814993Z","last_seen":"2026-02-14T10:08:57.287662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/8.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/8.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 9160\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-23c8\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZzYO3OKHvG7wwnDMQarle6KdidNU18yFgGCh8O1s5NvY0GEIg%2FVmXArKps9aXlb%2BJI6twt3rSZYLOz4cnEOPDh9XlNZ2HaEYGbkv3FjVFmM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99de5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 131 x 139, 8-bit/color RGBA, non-interlaced","md5":"4ff85b66932fc53f28861a65f30e7ff5","sha1":"f36ddf5718f7cfa214e6638a9d2a4b97e1f085bf","sha256":"857dec9b955f386c7ed99e42bba79f9d55e10679a5543b1a6445513b7dd5c3f7","sha512":"2d0ed4995cc8fa16307abd869d031fe02b85790fca282e07f0958e1b4bb1639bb5ca824e929db13c1eee53de189350ab6c885cab89a9fbe0ca0647a8b8b6c5e8","ssdeep":"192:ESZ8xGzQq+umhW+twTpoJwKbWRulsiKdMxftw:DOuQwz3CsiKdow","tlshash":"b312afad58c9da10d7e8f6eb7d1dd00da66e8037493606ac985ae212fc07782518de85","first_seen":"2025-06-30T19:57:57.655026Z","last_seen":"2026-02-14T10:08:57.283906Z","times_seen":9,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/advantages/icons/4.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/advantages/icons/4.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 562\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-232\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwcAwxHb21rUrWxy%2FyKENJ7ukD4ZEoyTVtvVxuKTzcQnn3tlUM4P9vl0qoqL7dfsDxsZZxkL1TW4Bl84OC0x7js%2Ba%2B4Be792rN18J7v5Vd%2BU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cba9e85210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5af9956966069d5252a56ae27cbdd9bb","sha1":"3a66d62e449c7ecb730a889e3158b6cca4007fb6","sha256":"75d34e3418b6a8c6fba08e0fe08b4cdc86cef79dbe2d04331c1ace1a097b5444","sha512":"bbf01b28de62f81dd10cb450a75f809caf655587a0b4b8b25e699f66f74c23e284b2fac6a8b568ba212d3aad9583fe955780f594f5b0efb67ee45e71c200d832","ssdeep":"","tlshash":"d1f041d363a8e886c0ac073f4c3a8400d08a3ad9c703899a4f12a40882ba4c49440a84","first_seen":"2025-06-30T19:57:57.618454Z","last_seen":"2026-02-14T10:08:57.285214Z","times_seen":9,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/js/support.js?v=20260215","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /js/support.js?v=20260215 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 23:10:52 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6983d1fc-1f15\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sF0Ha2OgNiKB7sAIWZBl2xUNL2wTsuh%2BRnE%2FGFDzt%2F6B5ffreGw5eKiilxeTJW4zBJ2PZAbl4Gnflm%2FGznS2guHNfnb2aPSA%2FPeBYsKG%2FpAu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79ba5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7957,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"8caf8a2b4b4e6bf292157a52f46d7dcf","sha1":"689c05184a7d1490558cbf9d7b313adcd1cf8320","sha256":"8ea99b3ce31ffe53b4317904ad7775613a39a623598c6dfa53baaf5ec9c553cc","sha512":"c6b8d970d8e3c607b2c3a31b16048ec7513e5aa113ffa97f4464560d5e64b8cc9f88c725b654a28d1a36e5f4e78a682836d99e9affb8e5bde5c0f8b7690e88c8","ssdeep":"192:EicwJn9yiB3CWWXJgwNX0IW8xivQfiTiuViyijxILiuejiJXi2PwIiL0zW8EgyI8:EM9yifwTOIBRiTi6iyi96ibjiJXi2iY0","tlshash":"4bf1a35a45fb186001db60af33972112393290073689d941bfec85990faec66f5fbbed","first_seen":"2026-02-12T21:21:24.785196Z","last_seen":"2026-02-14T10:08:57.286146Z","times_seen":2,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/6.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/6.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 7721\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-1e29\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZSw3tC2ycjiAshpFjLOluf4mSBVvvXEgKE5N7FHeEWh6T%2BjVTJZNsgFv1w9shUFFnXk9FFsDky%2FArJBfwH6WYoG73rjTM416o0eSVSI6n5M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99db5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7721,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 142, 8-bit/color RGBA, non-interlaced","md5":"96869145859ba8a033b014df76827108","sha1":"d09b4cec71aaa58403f1b075ac3658895a2f0934","sha256":"e43fdec9eb871c656faffbb326f6ab4b6a62211019dd4a731c0ea5ad1a45f9fc","sha512":"961a939a4526c57a835ded5c455e4f241c051de3348217d45c982b743de1596be7c69694faf273d117a1bba66e163a4eb3d689758a2d3f30227bb3fd0cb5117f","ssdeep":"192:3SiHjCunz25r115ZeuoJhbpfVWSs9GM9bwlCG5Ye/9Jfp2EN0Igyv:i6yNAbFVWSwdwlVp9NLv","tlshash":"22f1afd729213ccd81871a7d38a7b1a52ccb4b07235f7f10de250c95292ef6ed9562ca","first_seen":"2025-06-30T19:57:57.616736Z","last_seen":"2026-02-14T10:08:57.287178Z","times_seen":9,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/js/script.js?v=20260131","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /js/script.js?v=20260131 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 16:46:56 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6984c980-478a\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V94ld8MKxJunXuHS6oA%2Fv%2B6LpfLUKBMC3zRDgYmdURg2%2FVcngeVWdAuvzm6nxghx2W45d8gqQQ9YPqLdr3q%2B4qA552Zrc6WWuG%2BZgqvCxorA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cba9f15210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18314,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (354), with CRLF line terminators","md5":"69fe4bc446f010a212ff382dd1fb05fb","sha1":"eb7bd80d87339359b190f0161e418e61afab48b1","sha256":"06b0d692798df920f7dacb0e756ff1fd0ada6b2718043c33f44e58a4babfd513","sha512":"ab6985e762b905ce2c678005a693270c299c213b6b347952455340e7424c9276373f11542b5d1a081a3f9823ca65ea5c7573952ec1682b3495a405604b7414d2","ssdeep":"384:bMxAZTNKnALe/ArLHf0AvDWk6KSEPW/2PQ+f+YdZzNYgMiz/:5EnALe60AvaktSEPWOPQ+fPdfYgMiz/","tlshash":"b1825044714e52a2c47b72b69f21c124fd31a63b87028b06ba7da5e81fb5a50c272f6d","first_seen":"2026-02-12T21:21:24.814993Z","last_seen":"2026-02-14T10:08:57.287662Z","times_seen":2,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/fonts/Inter-Bold.woff2","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /fonts/Inter-Bold.woff2 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/css/libs/fonts.css?v=1769914958\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 107236\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-1a2e4\"\r\nexpires: Sun, 15 Feb 2026 10:08:33 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2y096aYYRm6k2gobqFWLbd2QLHkTCRr0ItFB6IbFd1bI397k5f9o4iPNMWYTi9tljGmlXpLgDA5qwK85TXrNH6Nm3h7slVaoeOWo9AspjhOD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cd9aa95210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 107236, version 1.0","md5":"231f444dc08212ed0133d8ea5c95c670","sha1":"a9fdc76a1229a5db11b54c8790d11458547cd3b9","sha256":"04079eb5aa58d207bc036c8e55d464ea23947d1b1d48d220ebcd1b7c230f589f","sha512":"bbbda8a41a240a423b131614daa024ddb926f70f312afdf5ced0d4f9e945814b8e1bb7e49d0f8a7493dc6d34c6177e71d049020132390f4d4284cefb0aca9b24","ssdeep":"3072:xI6qrWAf2k3962eqVI91804T73Wyk7pKzGoM+lL9YZp3RcqZfbbHCA1o1:UrhuETHVbFTPaFQlL987XHCA1o","tlshash":"43a312e18e02e416cf8ca736e79e311c5d7c9cbf17784de9e0fda6c9287a11884c4246","first_seen":"2023-04-26T21:16:46Z","last_seen":"2026-06-08T08:45:33.697543Z","times_seen":1221,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/dash.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/dash.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697ec24e-399\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXDZdBqbgXmQEKws3CXAQIqRHfLE%2F50s4KVZalFzoDF0tH2bPzpBTAJdOe6HUffp1NOUTB1yR6NdLRKHqKTBzQhdiHuYdOSvOiSpQG5g1wF6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79c55210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c2b290a91154e16272f60a515a54ea3","sha1":"7ef41c993e8545f5379a6026a28da4f49cabffa3","sha256":"0c79128565afe079a61a5d29656b1e32abb5893481dac8b0bfc0214fdb785d2e","sha512":"65d007f33d02e712616bdd4043cbdc4f4676b9c231680e3e2b4f43312db18c7237f2ed67c79c7816698544dcf2fe850cf4ed23f098d75f14b6907976421aa995","ssdeep":"","tlshash":"6111dc9c66df1bd2658c9ff2cb22a0356da730fa6781844a4b063a13b11301e08ac8c1","first_seen":"2025-06-30T19:57:57.67339Z","last_seen":"2026-02-14T10:08:57.28911Z","times_seen":8,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/js/libs/wow.min.js","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /js/libs/wow.min.js HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"697ec24e-1fdd\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hr3LNq0d3jfubWn6%2BjozIFkDgY%2FitQUa0PD3Ea0l2GLGdlRuYzkPNxcTW6J7LaGk408gtM0ZI%2FC1hdSotQWsyjCxHxUPSdXm%2B5bHasPWmawg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cba9f05210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8099), with CRLF line terminators","md5":"164b265e6089f412b7927848018ae6a1","sha1":"1717e6b487126c5c3e992d47dba4c6c10f4529bc","sha256":"81c4cb0bc57b5cce1816bd704f7a2b12ec2b143c6a067402644d4a139b273350","sha512":"956bbda2e4f3069c72d8dbc003d04d02a6026428beb9b9c8b0b78eb1dcce9b73b6f619b5558a4eec9c6d681eaec6ebb45e4ecd504a77ef9ad69b9b95373a3270","ssdeep":"192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:iEE/Amu6qUxVBxGkAI///IR","tlshash":"58f1bba5374a70718a9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","first_seen":"2023-03-07T01:42:37Z","last_seen":"2026-06-08T20:38:44.577544Z","times_seen":3044,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/sap.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/sap.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/css/support.css?v=1770313152\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 22473\r\nlast-modified: Wed, 04 Feb 2026 23:11:16 GMT\r\npriority: u=4,i=?0\r\netag: \"6983d214-57c9\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ucaRZR1vv1QCvX7%2B5llnStQcjygqt0Sifcs76DEyxuQZ%2B8D8suGRi%2BKuakCvSyyaAG12%2BPhHs4%2FGVe4KSDf6nG8wI4O2qKhoegVxzESUylp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cd9aa35210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6887ab46dd5616dd72d1b9811c6201c1","sha1":"a1db9cb061360d6bbadf48cf6e044b2ece30bbf9","sha256":"92ce4fe9ca980939c8e3eef15a22ce18e6109494b1ee39d745616c99a3e0a822","sha512":"bc12e301d1c5fdd425793512379e942d2dd73971b5e27431243663fc0e00995f2b5f8e05d1425952554c6b9616fff96dd592cac8ccc70c6fbaf806725820d866","ssdeep":"384:c6KeskngMuY2lhKJe4Y0CGDwbNQBU+Q0zjZlvyoldONiUTcdVLxawjUV9Tmz:FXsknp2RX0CQ2QKmzlYoXO9cd/Ic","tlshash":"d2a2e153974eacbdb2b59943632c651086ba1a3a0d7a25a41b1df3045eb750f43c3e3d","first_seen":"2026-02-12T21:21:24.812228Z","last_seen":"2026-02-14T10:08:57.290485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/doge.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/doge.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"697ec24e-4a5\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JgIjrvWx%2FU0IvjGqN%2BljfHxKxEi3D8sFVdhwYQIB%2FMv94shSjeLOtkhcPTPPAKXNZNrgzMkeqoWoQYHUv9CEE6FqywZ37dEFUxav04JvnT1T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79c75210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1de9e01c3e717ce8460e99b52670932","sha1":"f2fb7550b605db95ae01911a65efd55de0f553dd","sha256":"fac04cf5b7f38a651cee0eb9e5149f3e0babc901b79b9bca45d59eba47b9c956","sha512":"98fa8bdadeb86becb88a8849ab2b10654b312447e224fa44b18b30ca20a589c7e12d77246630187919c34f377515c3089444adbb08038823e3da5c9d0257e062","ssdeep":"","tlshash":"222111fdb2ce36d1e04ce7f49a22a851327364b9bf54ceb4c2aa3972b10301d119c925","first_seen":"2025-06-30T19:57:57.62627Z","last_seen":"2026-02-14T10:08:57.291641Z","times_seen":9,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/3.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/3.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 32928\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-80a0\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07ob8xqiCN8fOP7XlfIEF%2Fc7eO79yRfkCJN4WbvQljkfcROuSNyaMcIHglbPycuc2V2keQmFAziq5GJf2S19CgHhdneMjGWHdofpdz%2FOpsOs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89d75210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32928,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 347 x 325, 8-bit/color RGBA, non-interlaced","md5":"a07cdd3403278f26127c8c3d85029397","sha1":"8d09824a2dd643c4bb21655f4d526171549fa552","sha256":"b78e702d0514aac0be4bd60909d0c8c8fd99fa6751507c047ce6c20d6b06fbcf","sha512":"f50ffdad4e0588386fff275a10635b85131f36d3c065634a76dfe917232596de196c49b7ab416c07007bf6b9e39e7f665e29c673777f3f9284ff64687ed078a8","ssdeep":"768:RzFhG2Nxb/+cLIiP4NBrhdbkE4QavbYLk3xgwGSmtVxv5MbJToT:RxLNxb/xLIdB1db3YvbaSmtVUbJToT","tlshash":"8de2f1c70c1e0d8a612dad0588169aa9c1b70af6d466d39be4f5ce5fefa01270dbc543","first_seen":"2025-06-30T19:57:57.645453Z","last_seen":"2026-02-14T10:08:57.292493Z","times_seen":9,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/css/libs/fonts.css?v=1769914958","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /css/libs/fonts.css?v=1769914958 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"697ec24e-584\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVdVTPBQhRfkz0FAcubY2dv4Or2YSNwyW4%2FfQ%2F2heqahzI9Rnhj5uKkeBg6ivHgGnD2QzL2IFJAT4a%2BdZKLn6QUV4qS608E1f01W4r1b5Qjp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb69b45210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e54eca94d5900be8dfe3fbae3563726e","sha1":"cf66bb500fdea8c43b959d7d76b8f8fb5b22f2e2","sha256":"d1c860d0b6df5c2d6ec3840bba45d405052533c4d2786d5bff3e55fd89375a29","sha512":"e4852f7227d64af4dab18d523c6783af8e32c923db5510d924bfaf0e4873dc2051fa49ec5aec0d9d403a304bd07c392e25166d99ddb5d5de071f226d8bc063f6","ssdeep":"","tlshash":"f221a520a51b7202c9310d17739b7f292f0d286a71149a23767d0879befbe708392f5e","first_seen":"2025-06-30T19:57:57.685406Z","last_seen":"2026-02-14T10:08:57.293197Z","times_seen":9,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/css/style.min.css?v=1769914958","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /css/style.min.css?v=1769914958 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"697ec24e-95d8\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nv%2BiL30l%2F1m0aHeghMjJ88Nw1D4YM9o3g%2BBoOdvpD86vYtcGapjWU4yv7l1xW6HcEb1lUJk44O3EYD1QZrCr2XvMORVyHUiRMVeBJdT056LQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79b65210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38360,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (38360), with no line terminators","md5":"8d830bead4bafb0a979d13670d61fd53","sha1":"3e4ac7b0653d45c9a45fa349a298c9927ee56674","sha256":"f9084322a8416031cc247cda051f5ddc1afbd5385a48de8eaea2c1edea336a21","sha512":"2eae468ccb91108132a3a2df9377d7e9607aff1d824a9d1513d5e5ac2a73449bff8b6f5691b94983a5500d85404bc4148de15bb546c55b32247bbd54d16d4ec7","ssdeep":"384:DZRhIbNgoWbiYoOgoMpsNV7bHuBuYsQc5GjEYN8t9uhCBTXBBMCyfYi+57FQEcYD:DqWo78DnagDbheL/N48Cn","tlshash":"fc03846346612669f047df7663d09ae93038c52b916303feee92ba15c7c736707a334a","first_seen":"2025-06-30T19:57:57.622839Z","last_seen":"2026-02-14T10:08:57.293959Z","times_seen":7,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/advantages/icons/1.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/advantages/icons/1.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 285\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-11d\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4o44jLLct3UBM8FVDcCLDvsm13k%2FY00rW4lRkb46FGAF2ENKumIV1yRvxtlORWBrhkbakc9NHW0rO%2F2DNw5AdNK5IRLth79F0GcVO08yka9l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99e25210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"feb5b3e7d500b3061d1d6b3e16a432d1","sha1":"c2ab0852a6907f6822dc3252e065b54cfb0717ff","sha256":"ee29cea38153c1c1e4f3d15311383fb76542b9def3e4cc08565fafe7cfe843bf","sha512":"96964ac79c4408f17f96001cb8ac95759fee93f3e43f83d9cffb50fd5b78c754698af94ec7b88dc8fcd8b79b4d1d6cc7dcfc1d81916449b260a5991f273a6341","ssdeep":"","tlshash":"b2d0ebe2ea201cf04608eee3865f02a0ac4f686e06022209a80bf453080dc6bc88a7c3","first_seen":"2025-06-30T19:57:57.667437Z","last_seen":"2026-02-14T10:08:57.294837Z","times_seen":9,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/fonts/MazzardM-Medium.woff2","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /fonts/MazzardM-Medium.woff2 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/css/libs/fonts.css?v=1769914958\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26712\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-6858\"\r\nexpires: Sun, 15 Feb 2026 10:08:33 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Tgeqf9bAkF2HDOdoy66wE4%2Bg%2F0Rjy7TKK6SQ7Y4p%2BiuUYT1yr7%2F%2FuJamlcwBeITXM9XKmxYRUuEXvLOLz0IEO37ZxpxCFZgCYfgx67%2FLbsP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cd9aa85210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26712, version 1.0","md5":"ab049c4dbf85f0c0d1e0dbfa7d939406","sha1":"d70e98d1665c5e670c2846ca36d1164b0d5c2736","sha256":"49e040c505cf40baeb1f644274658618995df443ec71684b17370ea19a1294b7","sha512":"94af26efa054ff3cdd8e05042a195db515bfb9eae9a17ff2bfb1fa24e539968fbd9db52257e1ac5be6e8369466b57a6be65fc51a33aacf76f877a74aacb603a1","ssdeep":"768:ihQHiB694jPoy8RSDC3k/fii3/YY/LXogFknfjQK:ihQlKoy8GC3kn3QY/LYbLT","tlshash":"5ec2e18ae70dc92319ef1aa137d03e617a2f60016e7dfb6fb7112f15b1c46890835659","first_seen":"2025-06-30T19:57:57.620581Z","last_seen":"2026-02-14T10:08:57.295716Z","times_seen":9,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/en/index.php","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T10:08:32.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /en/index.php HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXLhPo7xxKt5PlYtRmgd%2BX8p5N5pkNh6TMHEPgan9V%2FgNT2zh%2Fd9fSeRXjEWJxDKmxhMYyym658FYGDzzqwApGG8pq7jUcfH27i0yR6CnEOF\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdbc3c91b7bdd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":34059,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2163), with CRLF line terminators","md5":"47009ebae77ae1a924e72a97eb2e6f79","sha1":"d87969b3db7aa5cb98b291b31e7dbeaa2c93b0dd","sha256":"3edde57db511a2f5420484b63fe6d580f54ff08121f7fcb45959d37287bc856a","sha512":"10d3adbf4846b431c729f8bf588b3e25552b2164b8785a1df916dd3fa58075f89d396ab13f229f33dc0e3bfb0421b5492bddec6bcfc4800fd3885921eb5864b0","ssdeep":"192:efYl8W3JvJnr1ReFFUmVRwTfGGuaXF/Fu+h0r4k1+hh8MF4x6obyxwwXOCN7s7rr:esRFyHHZHUGMDngIMXXzTZHm3+","tlshash":"4ce2dc3060d6a4b3d17b90d66d29abb2fde49213d7065512b2fc67cb8fbac14ce27412","first_seen":"2026-02-14T10:08:57.296194Z","last_seen":"2026-02-14T10:08:57.296194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/css/libs/bootstrap-reboot.min.css?v=1769914958","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /css/libs/bootstrap-reboot.min.css?v=1769914958 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"697ec24e-fba\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0379cMfKeJtALColPyxjx9eZy%2BN7QW%2BPZX7KGhZcgNcQkuAakna6TN542OJxVj9Ic5wSNcuY9sG6rBrGsUbFOpfHBC99e6%2F1IF4devR0e4O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb69b25210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4026,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3638), with CRLF line terminators","md5":"f96a1272581712b419d1287a659c67ff","sha1":"d562f7186601cf58e853c569dd3b6648f272cb04","sha256":"fe2a1a3224f293abcc83d5a75244f3ce4c0593d0b6202b34120e32467a7b2fb4","sha512":"cd0d86a7447c7b7efbdd81c628f8eb3a33ab151aa9898889db04be760df40e85b6d7fe36b30b49af3c6b4763595e4da03d2526ce875dce3739887ed8d1ebe23e","ssdeep":"","tlshash":"b981d877630035a48b778d6927ca679831200522c0e3b3b6f513da74cfcb9423b6ab1e","first_seen":"2024-03-05T10:21:18Z","last_seen":"2026-04-02T06:35:33.347677Z","times_seen":15,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/ada.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/ada.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697ec24e-30b7\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nEVQum4SlrKJx3cXPIw5iun4ZbznxwD1SSugUKKEcat3H%2FdJp23r4YAyS2UaCKZnZARzoOnAwaycWqaPt4iedtH1AQqSMHUG29V3LZHU%2B%2B57\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79c35210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12471,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b81cbda4ff8f42b9f1df4d5a11eb1fd","sha1":"0d47306582d1398c473f53274c14b5ae7123a8bd","sha256":"5aae7cca2d99703e0dca68a55a889e67d3a362c3fcf3e718cf4398da829e811e","sha512":"300ba8673040aa1ecbc943dabd1740892281bb157b596126c2735e61b904d9471278c6068e24c680e7f715e394b55c072e2d752cdb345f66483ca1154acaaf3d","ssdeep":"192:N4IMlILAbUtMPDhuNDNifvQMlILAbUtMPDhuNDNifvja4:lEwXhNinQEwXhNinja4","tlshash":"a24220e2a7e5f2d4e60ae7e0d52144327a9f34ff7b02cb5d4b99aa90a61205d94cdcc0","first_seen":"2025-06-30T19:57:57.592267Z","last_seen":"2026-02-14T10:08:57.297815Z","times_seen":8,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/stellar.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/stellar.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 20:34:18 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6983ad4a-2e5\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERzFYGtirnTq4n2pb%2Fse%2Bmbj5g1iuMUZ3A3d9kr2ywXBF%2BHf55w9SYPsjFhEHOhJ0p4wsYdTPdUixGHh70L2TqhRsvL0wSSnghIKLkrxtblc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89d05210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":741,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1ba533325aca36d5fbfb4fcf98137e0","sha1":"8726beb9973e69b4740fe45815e10c6cfe027189","sha256":"23f9b18b5bec0f62e5990332ffb0ae9da81a0de4b865031f24e28862c34fcf7a","sha512":"12efc86da99c81a6e319f5fd40f266207b9114e94fdb5abaf469c60ef28cb6a55ac61c1a5c415c8236039dea27590bb64ba7b4629a094874f26d6dc70f7882ac","ssdeep":"","tlshash":"ac01d07393464e20f1614bb4abd8641231e6756631e9c6fc67922be92d05cf32930d24","first_seen":"2026-02-12T21:21:24.798503Z","last_seen":"2026-02-14T10:08:57.298663Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/2.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/2.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3436\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-d6c\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRY6x0l9knCUyimnluNl70TVYktaEYW%2Frrj9F2o137Hs8%2BnemTNWoh6uGMmtKY4XM4KPD9L4P7HdENWOzwD%2BE9i1UcAiPs9RbOEdvBztgMVQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89d65210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 70, 8-bit/color RGBA, non-interlaced","md5":"451289840ef5bbc64043301ea1131756","sha1":"d981f257130b1f043d17cea47e3f181d4721db11","sha256":"5988a6e7de9eb739abb944098053b3c81b4378a3bc0e6e2877cbf517a36b38d6","sha512":"a46700cdb1621b73243dd3775c9f4d96147b817423d9d3f8f8600a18d4f504080e7e6ecf286a911ebf88d5614547ce3a17ba855300770a642aecd1c80ba4b983","ssdeep":"","tlshash":"95617e931c3b851ed94447f0ee0b0bb364752ea046909b0ddb7d06799856b393271ad3","first_seen":"2025-06-30T19:57:57.613452Z","last_seen":"2026-02-14T10:08:57.299474Z","times_seen":9,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/bestchange.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/bestchange.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 4528\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-11b0\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwZg7EImdJnrH16%2Bz7QyElatC50qLqDY28s9gp%2FvOdG5W0egO34E%2BW5CCnGsNGcTOMyzswKpqGKWCsMmGYSxpQh%2Bl0XvBawBSTPVzien1SPl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cba9ee5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 131 x 36, 8-bit colormap, non-interlaced","md5":"dc3d520dfc755b790992e16fdffec2aa","sha1":"57f9e81e4c3f593811918d9cd505a568d7bf03f2","sha256":"eef9442b3321183a24b4b67ea84ae33b7af2e12e987cef0881b02ecdc5f31450","sha512":"609c4cf79cecfc56456ce40edb17360e43ec60b306a519c26f3b594977c8af8e1b571fd2a9237e25155cecf70153dec4d8f488ca024d330f739748342778a70d","ssdeep":"96:0JClMI2dFkh0ZqECxkabNrYwCOqpiNoaGN4pcbiP:0x/fqjxlbSzO+iNoa1pT","tlshash":"70916dec68c824434f76e48218f7d226dc25ca4c53c53521bb8e24db57162f9a40f5fb","first_seen":"2026-02-12T21:21:24.784298Z","last_seen":"2026-02-14T10:08:57.300304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/fonts/MazzardM-SemiBold.woff2","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /fonts/MazzardM-SemiBold.woff2 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/css/libs/fonts.css?v=1769914958\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26492\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-677c\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Agx8Oc21y1uu0uD%2BlWcIepxiXMhBDVnsz%2BvnW%2BHocsP%2B%2FpfNybcjBHLFIEd09h2UMdugsNOejj%2BrNc9g8151AqtqzWA%2FRyJqLUCDIBXsSVOQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cd9aa75210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26492,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26492, version 1.0","md5":"1ccdb02a0f3f31cd3c8d0011c5a9b0a4","sha1":"49ed95fdad74c271dcf923957f8cb3ed25bff0d8","sha256":"88cca2905485423646d0074ce1346849b611d4b3a3ded4a03e652428df425c80","sha512":"8aac2aa9b115339c9b0ca4489b65b2a8963d3e3fae2c29808394ef38b8720f812250f126f233c9578cb93d5697c104b29063b330b16999452b8f09d11ee1493a","ssdeep":"768:NjeT5na7ek86WKAid8yBW1yO/UjrUwD0AvEE:NyT5O8mAHSn35vD","tlshash":"f8c2e0524e55f8abf4ddd32f26e0e50b978b588c4e8180935079bb767e973c502ebb01","first_seen":"2025-06-30T19:57:57.671813Z","last_seen":"2026-02-14T10:08:57.301115Z","times_seen":9,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/css/libs/animate.min.css?v=1769914958","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /css/libs/animate.min.css?v=1769914958 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"697ec24e-1184c\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrdF8Y%2Behe47fRJHezOgAEecKZUpcJSWY3GRbqqs95lCW%2FgH0v5P0MliIS3Wr5XvIm0IKjSFJIL5hrGUvDoSI46%2F80YI8rTuF7KShxGo0DPR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb69b55210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71756,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65342), with CRLF line terminators","md5":"b3d5b75898f1ed885c7d2b538faa8b81","sha1":"bc96496831f4df311443b8e3d76cfc17db53a988","sha256":"a61e123314188bd0453320008e01b4bbb665bee09039f4cbd9bef44de410ce67","sha512":"be097927cb6f3c12ee4140a60f11dd56bcb1e8661b35848f25f1ae2417b65190924d73d2d01c04c6763fc2c50d3931cddbc2aa74cd945f84145d3f3fe451f433","ssdeep":"1536:X6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:ykZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"006329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-08T14:36:52.061911Z","times_seen":2343,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/advantages/icons/3.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/advantages/icons/3.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 711\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-2c7\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9m%2Fk1Y5%2FN14UyqvYiPRu8Yn9HeZOxPB6u6r3YYyjaPTpsa4xKMb4mtrkk%2Fwf8U0KMIHTO1S4%2F0vetYGAOfc9gLUuMEm6HcWrYX6us6gBifdt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99e75210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d4d7d7c1fa3be75f83af2441c110f59c","sha1":"950bcb0d68a8ba3b146a68ff5f4eb1b440eee6d6","sha256":"e691dca62f45853180551206cb2e18de2f4b1a01900c97ec1db38f96b0ce0426","sha512":"3fc8396450e641f833359505b691da88fa9e234779f0cd3c42c1afc5555a2eebf1a80fb269e698c3dd4063ca28203db375078f44f1db455f472a64123ecc240f","ssdeep":"","tlshash":"8f0199cc1b5d7957905ecb03b51a573234330b5ed242a5143ce5e0101d29436cbd03b6","first_seen":"2025-06-30T19:57:57.681943Z","last_seen":"2026-02-14T10:08:57.302437Z","times_seen":9,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/bnb.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/bnb.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"697ec24e-3b9\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NG02SadHtONt0gPRdzz8gGyGfJ5nFDtv5sVg94s%2BaI0VtrOPHfsPOt2XGtzWFuM7RKMtXCOii0FrBwFD%2Fg1sJNUM%2FrL9CUODzZb2XN2QsQUu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79c45210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a926b9e075d4905bf3443a4e6d07144e","sha1":"0f795788b0d9d1bf473ea001a5625c4fa6712d63","sha256":"953e077a5d135b3c8ee14dda44924d13368257fa16eca28874e45dcf024c5654","sha512":"886df9ab95d50038b2310c450060d0ebc84d1932ec2b84124b2c2faa9176551690bc17a7d6eaef5b536e273c2f08e995efee9160e1e5408ae92b043ccc28da1b","ssdeep":"","tlshash":"3811bafac544108d56cec758241ee0b1e1923cf4bba8ad4c0b30bc1323524ad799cce9","first_seen":"2025-06-30T19:57:57.611832Z","last_seen":"2026-02-14T10:08:57.303312Z","times_seen":9,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/10.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/10.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 48553\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-bda9\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8X0CoEPgsZKqdupN4wkVhrmUOpsPoKv6pzPa82TcBb%2F9xbUzNzsQ7CQFKgyIb4SwEyLAEiLWX%2BnZw5U25xvrlsxr0E3v1TqyMt0KCmOKNFJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99e15210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 328 x 338, 8-bit/color RGBA, non-interlaced","md5":"bed4290d3c44f3278f0128f43be340c5","sha1":"9dd60aa3a70db63c6e2ac0e1971f67bb0678f412","sha256":"c2407a429fd293d619e0292c4d1e93409a3b709b936df9fa2b9aa6704f078022","sha512":"66297e57561440b84f69128e65596a0df54509f0da2594ca5d7cd48f54bdfb16a10d580fb70e1fca5bcc36438cddd507778250c552a5030fc4996f49881787c4","ssdeep":"768:Z1FQqxqCXfvpfKbAz94pn45wUZxPhl6jm6l2NNnc1p5yJscpahRxo6Xd57KLFRG:ZHhNfvgbFp4RTPhl6KPnovDhRxBXKLFA","tlshash":"072302c403d94ff2920ea67e62c5eb36204d1b795601d645c8b4fb6103bacaf285dbdc","first_seen":"2025-06-30T19:57:57.66488Z","last_seen":"2026-02-14T10:08:57.304274Z","times_seen":9,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/ltc.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/ltc.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697ec24e-275\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnCuwTQnITJ17%2BucGKx9R5UwBV4011PeDeUq8b2Xt68rEFJlzNtPL6Taz3rO1rBuEOpYZEpZZbhw9C%2B%2B%2F7yC7VV%2BRWKUkQnHUlpw%2BLXipqG5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79c85210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b519f290a1bea8aa604d84b9dd29c058","sha1":"e7094b041247dee4ae49ae53ceb6d3e5eed6f47d","sha256":"a788b3f3b34ed6455ff573783629f79eb002c34790a2ce54f7bbbcbf2648ec68","sha512":"52ccc383422c9db6be971de78f4a3735bbfa3ad51e336f46e4b65225cdd226083849696f8f3fc476e184036b5b3bff6fe916ae2d26bfccac1f77bf372007a9d2","ssdeep":"","tlshash":"bef044fce488549c168ca378950c24a266622cbc77c84c6d93f13c132f910ae385ad5f","first_seen":"2025-06-30T19:57:57.67835Z","last_seen":"2026-02-14T10:08:57.305148Z","times_seen":9,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/toncoin.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/toncoin.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 22:23:50 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6983c6f6-1a9\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BB5ysckaMP3EgoobXK8Nri5j%2F2Y%2BUbSlRpjtSnIFMcNQHd81pYvoZ2P%2BPNV1KK0hAu08tDJBrg9Bl4WsXl4AhZKGq%2BVzdmz2YEqbfSr2lZq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89ce5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":425,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0a7c19ccf1c29fe32f8a072013b8e5d","sha1":"bb59ec740c2d44e39b88709cfd7e0788e93b7280","sha256":"9eaf51d3101dab0555682b38ac9cd1769bb9dffda8c22cbcb5b9d499493d666c","sha512":"83d9183c45f1b150f247cf3036fa6deba6868aac55a08621289c4383b13c0b7c595e3bec628ad529ba7c3a3eca12b1e8b3753a83a6bd0616e6f77f949df50fd2","ssdeep":"","tlshash":"96e081fc02e810dc8f42ce598f3e305cb32eb48a9a03cacdf0a0021cc64208aa20fb00","first_seen":"2026-02-12T21:21:24.77546Z","last_seen":"2026-02-14T10:08:57.305927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/5.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/5.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 16344\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-3fd8\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spgLHXbKzwiRkWThh02vWxQxZ%2BRPShPvrAaHPKdvp8G%2BmhqNKDqXV732ZFw%2FQtZZLLRv1r%2F6CaYRhMyNRQ5E1kAM5Z4bLTD%2BFVVJWYc9Xoh9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99d95210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 197 x 223, 8-bit/color RGBA, non-interlaced","md5":"ad5da35b48c384540f01f309518e5bf8","sha1":"2e0a033b3d9d3ae1889258f8c8bb7d7c98956ff0","sha256":"fa1bd9bfd365e2abde70031dca6bb19f5378bf1858988ea8adcb82505ff55f02","sha512":"eb22fb2055fdd1429ac2ca62bacdc7231b004bf7eee3812178b01fd410b91500c134fca3060e7b564961fc15c5bda60792f955b620db2396c0ec5f75b946359c","ssdeep":"384:LSgITtsn3i4uMVybvC0SBpR7PsLtxIvDEDyS9oYhxSvaUFkiCVTXRb:WfKizMVhdzRALt4EDx9oKUvla9FRb","tlshash":"8e72d0eaba24d2c7218d92a8343c80fe5bd642af7281b5c17052d58ebddec94d7e9418","first_seen":"2025-06-30T19:57:57.614848Z","last_seen":"2026-02-14T10:08:57.30665Z","times_seen":9,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/toastr.js/latest/toastr.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/toastr.js/latest/toastr.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1884\r\ncf-ray: 9cdbc3cbd93ddfec-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659946f7-75c\"\r\nlast-modified: Sat, 06 Jan 2024 13:26:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 12595\r\nexpires: Thu, 04 Feb 2027 10:08:32 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nLSAfkNUVIIyMUCxMJGTdZB5k37STtINIaWo2C4vBri%2BQqRsQHKzMiCJcj%2FTAn7FQ97FJIfTyCBpxVX3N0W7nyToYtNeA16Bh1AMZkWXvfo1syGxoIDLESQAnOdhjZlLOEk11X1u\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5537,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5215)","md5":"b36f28de584845317de40a7219c82b1c","sha1":"6de8657c8782561bc023478ab708179ed846db1a","sha256":"ddb96c25de07962ffbc0243e6e68177ce74aee9fd950cb4f5d8d3c8e6c524a09","sha512":"54477e9eadb90a447aefa3bea4b0670d6d3d47b5505fd31d8a28f4e768150a9e72547de31ad1fbd07a3f514bf89890ec11d4efa91085660d0d2868a88c69d40b","ssdeep":"96:LozfdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrI:Mzf4BtcvvRqIQcNa74ccrI","tlshash":"f7b19384b220bb8b5b731169919f144b937673b2ccce55007639a5987e7082c97b7fdc","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-06-08T18:50:53.681074Z","times_seen":5658,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":17,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/fonts/Inter-Regular.woff2","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /fonts/Inter-Regular.woff2 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/css/libs/fonts.css?v=1769914958\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98756\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-181c4\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCsrITbhowflYNRDaJAaNTz08piG4PIKj1fbcu1olkeb%2B9UStnm5%2FZcCyaRgRiG4LHUnmMZe3lykKCClf13%2BRE2qXAKBo5SNW1I1nfyeGjk9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cd9aa45210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98756, version 1.0","md5":"a90c493e75dbd61aec1195dbb9bb6b06","sha1":"a3e3ae8b6f79820b0b393a92fc613f50fb9f03c6","sha256":"ed64c5d83f5fcc357eb8afd0a7b8d9912cae97d88dd57cccb64787bb643c7c76","sha512":"4c3bda6554b08f9378fca75fb24fc9334534f365de8ab28f83228d95871d5c25ca90ba3945c390dc41ed176f4258df86bd5db1849b7d5bc09f257d309cd66cde","ssdeep":"3072:3f52dl72hKiGTrJNGZvdfJVgBz+rbFoGR0F6M:vol7gKiGPc1u6M","tlshash":"28a30217d38fbf2cc371ba7a390b245d225e9280421df6195f48c94a161dead27f368b","first_seen":"2023-04-26T21:16:46Z","last_seen":"2026-06-08T08:45:33.593247Z","times_seen":1850,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/fonts/Inter-SemiBold.woff2","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /fonts/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/css/libs/fonts.css?v=1769914958\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106788\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-1a124\"\r\nexpires: Sun, 15 Feb 2026 10:08:33 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEedjDg2HnxVNEOsza1ovyXDk5RoiUescQ3oaAUuppkwNmrN%2F44Edvyo%2BkMuMqVyRvH2F%2BEatXbSS3Oecd492kbWLIiQ0y6Z2QLsQlh5U3kh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cd9aa65210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106788, version 1.0","md5":"920533ddd1d6ea543f7fc3e89b4556bb","sha1":"bc11a427dcb55d1354a5ea07bbc353c57fe9cc0b","sha256":"d6d0905419e1e821c57189396db46ffe335960bd68befedddaf9e73f3f2e7a3a","sha512":"08edf9e3b3b03eb44ec7b194468eb969e72d51b0c66946ece974d0d6c1b8b738facd155c576b8dc1302b0889a5c04924c44b91cbedb6ed0c64c72c780742a571","ssdeep":"3072:uz6Qf75dUBRMxnGF/g7OVr5eaHPDwqK6wIms:O75LxnGFdVrnDc6ks","tlshash":"b7a312f67491d415f90f36f99b77a0251abd1957b4bb4214c3833cab41ee08a7bacb02","first_seen":"2023-05-21T06:58:03Z","last_seen":"2026-06-08T08:45:33.68547Z","times_seen":1161,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/icons/user.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/icons/user.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697ec24e-ff49\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSc4Ol2kcl9j1yObU9r9enORtnsDlO34L5hq3wqW27xzbKGw9nxuE%2BsDPZHgy4a6%2Bj%2BPzSa7Jdi5GyAmXyNzdZMDKv0obg5yWcgI2tWt%2Bmez\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cba9ed5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b26355d19422b7450443099fb74f70a3","sha1":"8c6deef71a8f1f9106749f4b2730bdbe6b79bdd3","sha256":"15be63df9b94b9decde6bf5121c1b1128106fb4b384f25ae129e5501c0c661ca","sha512":"4690eef1bd0fbb7417b830cd190b3c3352bb0ad452a75e5fe9b7239161328f6603da34af7a8438be2fe4873f455bdeb0fd9bf678aad22fc9cb05dfe2e53796b6","ssdeep":"1536:M4V6Wtxt8eDWVtYQIecTEoB0c+MRcG34fY+Ta5dBP:MOtAeDc7IekPB01MRbofY+Ta5/P","tlshash":"a55302b4f08675761f46831237bfe3b98c109f6703c583d857e0d687366ea08b8699b6","first_seen":"2025-06-30T19:57:57.684002Z","last_seen":"2026-02-14T10:08:57.308827Z","times_seen":8,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/icons/loader.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/icons/loader.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/css/style.min.css?v=1769914958\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 4910\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-132e\"\r\nexpires: Sun, 15 Feb 2026 10:08:33 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xg4LSN%2BmbnyiOV8NsiKV99CqNEzsXUCTJCynBF0jQufxIDVcdWxksUN0sMFZteYnohHpOoDOFgvA4ebFpLOycTTzOXJI2b3HAJ4uN3iZO%2F1h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cd8aa25210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"ecf8c00e4246ec18586979aa4d53523f","sha1":"c8744e79312f91a394f488bea96dafa9e38466e0","sha256":"7af5edf9f6db75e3db0b208c012209fc7f0b4e90540f0cdfed5e39b97366a643","sha512":"ce103b3baf8ee8f79a21631704ca38ce716658f47f182f0e97f16f5777e92f758f5372ae46a381a6745ad5087719a98cc4b78afe861e4366d9700be1c401427e","ssdeep":"96:A42SA2/MlYewupQ02UZ5wlSy2p9v/7bLkS5h9Hov7IMwItf7bHb7:A42SnMwupQ0DZ5wlSyE9n7XXh9Iv7IM5","tlshash":"7fa17c1f9b8e04e49cab4867ea9a3b23b88d501be94a4a172c0d0d3ef109385cdc8306","first_seen":"2025-06-30T19:57:57.605962Z","last_seen":"2026-02-14T10:08:57.309616Z","times_seen":9,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/fonts/Inter-Medium.woff2","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /fonts/Inter-Medium.woff2 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/css/libs/fonts.css?v=1769914958\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 105944\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-19dd8\"\r\nexpires: Sun, 15 Feb 2026 10:08:33 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ounM8A6MV9kEa7SkcnCINK6QJ2R4nYjd8qQFGZE6JgmkqxvLN6gjheKmiT%2BgzkBjO3bvKVStTPP1Ht%2FFyz2MEDf7dRsL28aXsr0wMJsZWfV8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cd9aa55210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105944,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105944, version 1.0","md5":"943a67750859470af9d9989ae91aef35","sha1":"97e6452fe698bf7cbb9ffc164e967c60cb39c7dd","sha256":"a4ad8ac69b901406c6d29ec3173cbf7b00f4652b997b40033c8c640028a6db1e","sha512":"f6ebe9bba068627ee80763fd2d88778ce513ba144991abbdc8f61789adf04c42a585c17d80b1301e9c0c2546a9b06c4a05c19ee97fe2e956b6907d93fce71e09","ssdeep":"3072:h85XAvGlfCrOJbeGKaQiGZtkvJIZ39xRic:1POJeGKaritkhIl9Dic","tlshash":"32a312d482cae152c6fefcf06a6f0b0711244d8d33356a6b81f15f1958aa5ec0d3abd5","first_seen":"2023-05-21T06:58:03Z","last_seen":"2026-06-07T03:46:27.002727Z","times_seen":869,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/4.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/4.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 11349\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-2c55\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wCc%2F%2BSRpgpwYf9bpbganIZFpjv9yX9NACucdjMA9kZt97gJ%2FfqHK18e%2FPCWDA5MbNTp4OCsTYi2G%2BIUFli95ag4Kr8QxfXm3n3qJngn0%2BTHK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89d85210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 174, 8-bit/color RGBA, non-interlaced","md5":"3d164a6120305322596d995b9d3df497","sha1":"906ece867547233883f6bd8c3ed45bbbc2309a7f","sha256":"b3706fb9aadcfcd3a441c317252304d39c41bdb785bce375243c368aedbdfb3c","sha512":"1e9b6c63ccbf5363a9506229bb580b84c415e658b4b41820c2ef2ffa80c49c311eca2b0ba9affa42e36e0d16118829704f5bd5e000c8cc6f7b6b11a240c20852","ssdeep":"192:0SLrGhxFKMyjHUqJc8EkTaVgHCN+1+SzTD+TNtbTBOB5jVxRp1sSBR6ES0WTx:zLrgxFvac8EIaVPNOT4NtvBOBLNSSBIf","tlshash":"3732cff1bce96996fb88506802ed9ab3b19be3c08ccd12f92471556fe4503a06157929","first_seen":"2025-06-30T19:57:57.653047Z","last_seen":"2026-02-14T10:08:57.310795Z","times_seen":9,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/7.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/7.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 21098\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-526a\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heICYOOU1If0go3bywdG2UzgMzbHbERvhlRYMhkkKjOFOzHKa9Gdmeen0bMNxL35Ta15c%2BsPq18Qb43eq%2Frfpj%2BmEtpAD4vxogKdfvu3Uq2X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99dd5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21098,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 167 x 167, 8-bit/color RGBA, non-interlaced","md5":"6e1e4b0d54e5d62e081e28f525f03cd6","sha1":"80bba7a7ec66793d99abd22dabb9e35a7efd0376","sha256":"3fd5921a75e8a82d101365995b1538ed5201305afeda9cb834b487280771e93b","sha512":"99f876850d9e770185c6655f866e675a7d15f722aff50e5d7cb6ff9731c053a4e24d8460b752bff55cedeed0b4e091ffc4b747c92fb82f3f81f4a7ab358b0e3e","ssdeep":"384:KVKLfk121v4gcEqD+luBSk7a9gYLVpVL/F2ihfwYRtPCMi1UKITsEn:2Kb/1vBcRDSuIk7a9gYLVpVL/siqutrj","tlshash":"1a92c0b56b77f13208d44160da7e63d0c8b8122519cb29542ba5563f3f78bf4824dce9","first_seen":"2025-06-30T19:57:57.586681Z","last_seen":"2026-02-14T10:08:57.311631Z","times_seen":9,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/advantages/icons/6.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/advantages/icons/6.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 280\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-118\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a59bOKaq2d2KasOuYwlc19Zn4e4CpGlp%2FZaKi5Cd7mNOH0wmc91Ox%2BPBFRR8ZsszsrXEN1g4UY9WvJmwUy7m7rUzFaRLBdxFzCxKM%2FEBapzl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cba9ec5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"03ab0245bfa1ea069ab6563ba709d36c","sha1":"95f56cb7b5cc655253153492f3ce70cb5f6085ec","sha256":"f9e1698f8c05f713f5315d9380e86bd231851ff72bb99f421e456b2fc5d3f860","sha512":"0d90710edaf408f19af70b4ab7ff3d787af82098e1bcbe5f77a5fe77a37f53f65de106c0a0166de8f7c89aaea054dded8db2c8bf28acb452f635532b718d1f4a","ssdeep":"","tlshash":"d2d027ff9fcb6cbd801dd62f62fa7191ac774dd9101184153867d417a141d50c5c9ed1","first_seen":"2025-06-30T19:57:57.669546Z","last_seen":"2026-02-14T10:08:57.312441Z","times_seen":9,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/favicon.ico","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:33.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5GEldc7kbR292Cvb%2BApJrZ3LeZQTGbJtYtftmZxtmPetygyZ9RJN1jAs1YYK5TebWXaELko0kqI%2FT2Jpgx9fGG%2FOP9hK%2FMg8Q36H1gpk8e6\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"28de-649ba705aaf80\"\r\ncf-ray: 9cdbc3cf2afe5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10462,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 50x50, 32 bits/pixel","md5":"5c77a13ed0323ce04fde5670a3b1a098","sha1":"f2b9b7cd57abe99e55b7c44e62860e88e2cc6ac1","sha256":"a35b94af31c980e4443d90ec95ec660878fd1c0b98873f56e8f0804374bd7275","sha512":"bbd8d196918da535a055aaa760ecc8e6d7e6f1ceb44300c3972c6218971f3846b860d7129f9d68dd886497def27f7a62e161ee14a33f77c913e55edee3487894","ssdeep":"24:eA5q1455AMAd4oo4QgO0H45ova9Br54mieLMtkGu0sQRvqdMiRiRFRaRaReWsoF0:f2hK8OzFAeLMtk53IvAA8WjFytZP","tlshash":"5d22c769edd1d051da4c8bf5046cd8f82b61eb4dc111732eee39694b2d2302acae231e","first_seen":"2025-06-30T19:57:57.608502Z","last_seen":"2026-02-14T10:08:57.313275Z","times_seen":10,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/vender/kurs.php","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:33.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"POST /vender/kurs.php HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 20\r\nOrigin: https://plus-exchange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"first=BTC\u0026second=ETH"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PJDzinur%2Bficwu2rXOImslqm4yIjJs91a7rIuJzuFwqxMnDcdgMqUZWT9UB95ZQt%2BcsfjOrb%2FlaQZQhmbHO5Hmm%2Bl%2BIw0ETydlL7TuZ6Sds\"}]}\r\ncf-ray: 9cdbc3cf5b0d5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"a9db9620c2cea0c9813a7d010e4f2079","sha1":"d657d448030a448c256e8bdbf11e22e5cf670d65","sha256":"ad79b461195cae55366dcd0b5e972ad098d5d4817f78001b0df18bef5d718628","sha512":"05b0518c55fc065630e6e5f3e5fc9a8dd50458d032c2fd95824f866140147230519facd9af59113219c5b7484666fa49c04e4c5c6a7ff78c42b272156e42a3bf","ssdeep":"","tlshash":"3190021cb8144085a94020a02e57d6445e2659a58416695216d148e020456264035c61","first_seen":"2026-02-14T10:08:57.314398Z","last_seen":"2026-02-14T10:08:57.314398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/trx.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/trx.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697ec24e-ca5\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfooweEu0Wk7UfC%2FqDS8dfr716d7zNaOebJjmmEVO11a9TTBP9fh982AWdk8C40Idvset1Gb1yppdpLiXdD6lcoLtlGUdVXnmO4ml2UGtFrl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89ca5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9d1723d1c7bce38d7cc57402c65b627","sha1":"77f5415ef3d04eb86258a2b228b27b4b1f692125","sha256":"1bd130f8f58616e737fb33e8155c82c55634f00c1bcc75564ae64218f4cd5d8a","sha512":"7ef42b15dd64daa47a817b32fd0984fbadbb16f45d533ce118eadfd4323714729d07e40f79bb7f863bb01274a364a45c087f6f241a59189130f7ac29c3edfa2e","ssdeep":"","tlshash":"936112f463cdb1d0e148ebf09416a9617aab30bb2b94ca6d49e4aed4b61315dc48dcc4","first_seen":"2025-06-30T19:57:57.583798Z","last_seen":"2026-02-14T10:08:57.315273Z","times_seen":8,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/btc.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/btc.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697ec24e-5c8\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjAgO3wvkm3JYbfOf95XJSghardi%2BXDPTqmqdyz0RszQKcSz7Osjrl4nNuypPLZkT6mkcTMycvXUVDbGyY1amTdBY6T%2BI6Gnlo4aBPkNQKPO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79bf5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a90fd2ef9d04f94498f227681111b04","sha1":"bc819e460f76a9a09adccf53a0f4cba7e09a7483","sha256":"5664a834266010f0b24372c65c8764df4fb076ec82cd5730d4a13eec25762b9e","sha512":"63cbb4f55de55df8b59815cf617f9f8daa16a0e70cde22d3c08a97316ee294662a586585da175ee22dd870b5416540654c22dfa00ca83e8dde6c7270795d4a25","ssdeep":"","tlshash":"aa3140beabda77c5a604e37071210039f2ef38b9b6e6ce0581547998e75322c46e4c81","first_seen":"2025-06-30T19:57:57.610003Z","last_seen":"2026-02-14T10:08:57.316039Z","times_seen":10,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/9.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/9.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 23219\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-5ab3\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P94Qx%2FlkbU5BRQcjNObk3pNQ%2BSOuW768bS7ijjIWIReZBicnne3mVkqt%2F9CdilogTftezsRu3UlC6QHa1ZYMBUxY%2BoAsb2LcrZ4SJpFJ70Z7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99e05210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 343, 8-bit/color RGBA, non-interlaced","md5":"264f7387105abe5da201bbb2457aecb6","sha1":"30bcfcce7e6cc919fe81c43e15992aa69c117ac8","sha256":"a7dc68cf75c8448642a62fb4a629c6d2e1f2c2fb51840c7974c49c8347aa1438","sha512":"d5d9b6c4386fd0cdf0287fd1b7ba8fcfb54a2ba2daf6ae7d64005413cd0092476ecce5c0b45e715d91dda48e575fa2cb2c3a05f968de9ead79609300aed27596","ssdeep":"384:QV09x9REm+78RlFungZY61huRFTF7xBbNnc4ZK+x92lNQy5DY/F6PaQ:U2xLEArungZY64TNdnbRBypY/F6PaQ","tlshash":"7aa2d096780fc97846e9213c07512035d7bba913c84e5f24257aa88bed4adc6c85df3f","first_seen":"2025-06-30T19:57:57.627804Z","last_seen":"2026-02-14T10:08:57.316974Z","times_seen":9,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/advantages/icons/5.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/advantages/icons/5.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 355\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-163\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9sV%2F5AFueeAshlQB%2FWfNvEZwVPXDQ%2FC7QyjCWeUgDhd6EEatuFXD2f8%2BcLb2mNwibX19lkSWjmxSe9T05okSYGmhWCXSJYOLtFGAB%2FLS7eeh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cba9ea5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"7de9876bbe8f752d9764b2b2118a0f84","sha1":"898d30d8c959b3fe9eaf47eb240c8732b6dec5c3","sha256":"f9611ac4288fec1379af13c6eb3cf53fd0174dab9657fd41301c9ecf9ce406a5","sha512":"063efbd7e3f804800c341f078429328323ec6927eaf45decdb54180ef30403b34c61cce5e7e8fc66498ad1aea80a1fbe803be64ac1a4e303b5e1ee616f2f931a","ssdeep":"","tlshash":"1ae0c0c5ad808dab895ff45b28df02f5fc2b05944591c827b3e8f804ba30ae895467b1","first_seen":"2025-06-30T19:57:57.59814Z","last_seen":"2026-02-14T10:08:57.317916Z","times_seen":9,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T10:08:31.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: /en/index.php\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upL6V6TwjCQjaSjC2m555X6omgOueX17PYVlVn5AXfZ86cZ9Jg5WZJiDS5f%2BUQFpDKy5lS4q9mw6UhasybXG%2BUx%2Flm5duHjnY1%2FNXTSjrRUg\"}]}\r\ncf-ray: 9cdbc3c7f828dd16-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":34059,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T20:34:26.488801Z","times_seen":16249334,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":48,"dns":14,"connect":8,"send":0,"wait":168,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/xmr.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/xmr.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697ec24e-398\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=400ZCzGcWmxzDw0kDaRcZxfPuVXJ3MazNZMMegAZuJQ6MHYmk2%2B9o5gfDhcK9WNRELaBmOhloHey6uqWWdDMtd6qFOo79xcqoyujrw%2BlD6iA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79c95210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":920,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65595871840b7b22c7de914dea8573a9","sha1":"94026c9ba680edb74f94674cbfa9d74ad7a1d1ef","sha256":"bdb408e394daf3b2a51091f05d27fc60cf9c77fd552239bef28d19e6ae0473d6","sha512":"2153ee2a056748407577945aa759bfabc26ef9be0bd18c7293bb0a689f57eb567a28b111daf96379b127d43f56a3f4aeeed22c2fc6161669c6091008a10fb7b5","ssdeep":"","tlshash":"2d11d9f4e29460ec878ccf4680192c71e1e30cb5beedac4c4b746993b6a005e34a8c9a","first_seen":"2025-06-30T19:57:57.643788Z","last_seen":"2026-02-14T10:08:57.319154Z","times_seen":8,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/avalanche.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/avalanche.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 20:34:18 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6983ad4a-679\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BP%2Bh7Nf7bIhor7qrYYETWmBNTZm3g0YtfDafB7RhHlUAjYv1JAc3K%2BKasmNz6aZFCk0Ah7UFunZ%2BVSbNWtRPudqNqgfhXQlgf59gZjQNNxNS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89cf5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"302dbf6d4e025a20a5f06b85513c7eb2","sha1":"3ffd274f67690d15a9c0ac094c7949bfe61b1404","sha256":"15d032827bcba4f3d8a44ca309c592dbc69f8ca20205b14e1c8ac863b957b209","sha512":"7946685600d46291f088a84ba71c36cc2696647b2bd1f11c178472a2d3c302679274cfbc7b4b0e1cc53ae96f7dc3bc4454e9ad79ca311b6428d2a333bf827bf0","ssdeep":"","tlshash":"493141dc0a42c8dc5ec489f4fb2070c4ea0ff0fd66026f45d288ae5968838e88e4d55f","first_seen":"2026-02-12T21:21:24.794337Z","last_seen":"2026-02-14T10:08:57.319989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/sui.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/sui.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 20:34:18 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6983ad4a-45f\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2Hfqtdt11iWYHtmr3SIiS2wol4lYOQ0tiM9%2F%2FXaM9RrWURJFN0l2WgCW%2BNIbe31vOriihymm3eVAqfegaB2TflHSypQlARwHc3NGEsR3kxU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89d15210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d892ab6c3ad678eea4ba1f20bde414c","sha1":"62858628922efb2b744e4d79038b8284d41fbe24","sha256":"0d2093d3ae2d63433bee1401fc5c797d461f3b454931f206cc439eba51d21cec","sha512":"6c603fd40db1290acad68a81ec6b214e7d5631ce012db4e0e9d8ec9e17bd39c2f3ab9edfb9ccd4e386c04f4b8429713b048a6296bf9aa074acde65e2cc3504f3","ssdeep":"","tlshash":"ce21ee4b83c1efa9ee25813c02e8915070a1d4cae5f192ec7bc71a4be40d8d0519dbaa","first_seen":"2026-02-12T21:21:24.801117Z","last_seen":"2026-02-14T10:08:57.320785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/shapes/1.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/shapes/1.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 47461\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-b965\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kSmNTRttp7kA%2FQ0Z2G7LbEU6dNLdVxCrIuXTrPKNKR1paPL8RJGFz12P6%2FLWqFyasbZk3Prhl3ietuy0PWNrb8e4kQkWXd820UIR96ljSVQd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89d55210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 328 x 338, 8-bit/color RGBA, non-interlaced","md5":"aec3312713ee576f88505f4bfb93de21","sha1":"c9993503bf95813c9141661c544980de97a2a308","sha256":"9acf1f5eaf591d2dbad8b7300eee551fa794e1cf5c71d1095d78c3ded91e7706","sha512":"2b7d7583b5a32d4967dd492c19a399821b5b87818882f36d1486bda41abf54e992ee4b23dffea591037b8860625d1acca8de9a3f1e762450d47e25bbc6f96b58","ssdeep":"768:e2/fP3mgh1+qjF7zDO1dIvW1FBRHqLCVT/dYGdIblZDaSyAOuEM8pqxYMh1lOlDi:e2/GQjF7XO1qOH3FVLdYGmy3AOw8pqx9","tlshash":"2c23f14b2fa6711b0e4b046c5dee9eabc40c68a6e0021dfa250fcea41b5b5cc721bd75","first_seen":"2025-06-30T19:57:57.636719Z","last_seen":"2026-02-14T10:08:57.321595Z","times_seen":9,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/js/libs/jquery-3.6.1.min.js","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /js/libs/jquery-3.6.1.min.js HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"697ec24e-15e42\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F12XaVyQWDtMug0fgi%2F5ii%2FwTEYZO3UsFAijvANnv0FsHDX1rKr5nfml7ICArSm1akPO7UyT8BlMblEvHEVo6bz9SLVV%2Bxn3mZLDAtqS7WDO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cba9ef5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89666,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"8f1950538c6051b90dae76087bc65424","sha1":"f88af5a8061ad3170d0a7155636e798797ef9656","sha256":"24c7030c50c1045cfefddac2d403f4bb2043b34183f6887f5c88a3e12e0236f9","sha512":"dc52b97ac0efccd9bce32718d84a8573153688329455405411d52fc0b5d3dbbaaf9e038b57921bad43115d151994123948739b329ab4713d0e60b26a67efcf85","ssdeep":"1536:RjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvv:RdeIygP3fulzcsz8jlvaDioQ47GKK","tlshash":"9593f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-09T23:12:28Z","last_seen":"2026-06-08T17:12:06.247954Z","times_seen":778,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/toastr.js/latest/toastr.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/toastr.js/latest/toastr.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2640\r\ncf-ray: 9cdbc3cbd99cdfec-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659946f6-a50\"\r\nlast-modified: Sat, 06 Jan 2024 13:26:30 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 290626\r\nexpires: Thu, 04 Feb 2027 10:08:32 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WIRYeZab8NyNveZ5Uuf66JQbzq8zsx9WA3T8Fm34Aztn4viWqyH8EE%2FJ6WrZ7CXqzHqfL3HOHQhPIyp33cjO%2BOJ3XN3C8JBpMo5O0kQCggbDe5%2BszKD%2BWz8hzBQHEtpG25mBKJoT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6741,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6454), with CR line terminators","md5":"bc96861d9899e4e68fb2e59c363d8c60","sha1":"573b1f76e7a9db37e4e0d1a59da78714e46bc2a2","sha256":"10d159adb573ca535b8275f1d27dc8d60fffd9678ee3b5f1a0f7b4be4a77342f","sha512":"bca331f149d793ad33530c949d43ccdc76d0a3c41f98dc7bfa5b70f0f9b9ccbbac9755c87f0731a3c0db582a8c18a69678dc5603ccabc79bf749a56932f47708","ssdeep":"192:u0sKZ6yjY1SqvKbBY8syRttzGjVMSbO68:u0s4pYH8PtMMSb78","tlshash":"aad17331db812629fed3811ef45966092e1be1b3e6ed5dae650fa1acc2c67d05c33284","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-06-08T18:50:53.619753Z","times_seen":5498,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":33,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/arbitrum.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/arbitrum.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 20:34:18 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6983ad4a-76f\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6C9yi1mAomsXPXUcLqM4afO4pJCyS0PO3TxTz7R6UUry5Ls9hXoL7ozpWB8V%2B4%2F8Cf%2BSh4600GBjvlse4ZU2E0u3XWB9euAE%2BDnp5QOXzV0M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb89d45210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1903,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5593e12f3aa90e799409f8956901c6c","sha1":"b7c750767f32043ece10b99b37f30de6b6178a9a","sha256":"ba0cfb542be1c69765ccb08cd8721aae0380deda725e3aacc5cc5988dd6b4ee3","sha512":"ef6333281e9b273c90cd867b943afa11e08cd3761ae6bd1535296f15b28a0ab38fcaf0701b5308c2d79c96619f65ab92860da6a26351058e2a4631dd604e248a","ssdeep":"","tlshash":"2b416409219c744eb37ac3c3a67805e768fbdd7b92406084f4ff3cbf27019560981a40","first_seen":"2026-02-12T21:21:24.810698Z","last_seen":"2026-02-14T10:08:57.324006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/select/magnifier.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/select/magnifier.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 509\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-1fd\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1fFg542tP390wYIjaCp1vO5AxkSPaq2ZKj%2F25SYq2vad%2FtEtw01PtzU7Dkr2W9XvdrYKDdcf3PMb%2B31I%2BuApeVRNqKevXDWSnVqEFVhFkve\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79c05210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 19, 8-bit/color RGBA, non-interlaced","md5":"2f8a028ff0acf192556f8b67cf7b0c33","sha1":"52c53d35cd83f06380975f264e4a53ca5b3aca0c","sha256":"8569b11d3f72ad117bb49b90f9442d245ba18b264e4d68f3188429d8743bd467","sha512":"edeb39199cee5a6b646df662c8ebc698bab55d156a680e86609dae002cfb62cdb2c3b80f3e77a9ea55f0f43ed5a4f0f71d3069dd8e2f90be939a87f58aef2900","ssdeep":"","tlshash":"74f005fbcb14182bf8760355dad74e434abf9771c6450f297e410561dd13da81649740","first_seen":"2025-06-30T19:57:57.595283Z","last_seen":"2026-02-14T10:08:57.333668Z","times_seen":9,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/eth.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/eth.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"697ec24e-330\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4j1KoRgqZA0uBul%2Fr342sQWOovU9sFp4iSReErSLDtFCs7TKEcX43dBpM2R4LGhkfXDU%2BEBuPozGlZYYDH6G2LgpxdGR%2Fsxmsr3kufsqLXP8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79c25210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":816,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"496791c55e23aa4c69af01b389e85868","sha1":"ab33cd68c3d30e10d70cb261c6a0e320b439a92c","sha256":"7ba3e888da7fd4f07b01367d313c41533bd23d42dcd02493edf8093a79168235","sha512":"10f72a4be0b268c846fd89826e912100178da1711d3d74bec5a14a5be74c16404b05e0f4c59ea36eef5e529a9c6912c8c5b84f8ecf49bbc72647210343339dfc","ssdeep":"","tlshash":"650126dd408d84d8f7889729b82df032c1a7a1f46dab458416af321bb1c399b1df58c6","first_seen":"2025-06-30T19:57:57.67677Z","last_seen":"2026-02-14T10:08:57.334515Z","times_seen":10,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/css/support.css?v=1770313152","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /css/support.css?v=1770313152 HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Feb 2026 17:39:12 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6984d5c0-11f4\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ea65kt585Yysi1Pd1d3zbdLbH7%2FKRJYIPNoC8aWhrebp95jTYjp1h3azk5vrXe9fp6uJp4k7%2BnFMeOBqGxrdRO9uwZb2BGcp8vge5msYc2o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79b75210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4596,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"069898d11b22091c53d7ff8749115aa2","sha1":"2ba3fa6fdfe0b461739085e362adb7a933ad6b8f","sha256":"0537aa6adad35e0bd472e6b104e560be0c280af4e2f1f3d6ab38d94355f43de4","sha512":"d02770f0ecb510eabcfd7eed7b1af2c189d8c643cb0703c2b50c92ec355af98c4738827e371c0ee93ddfdd7a89b58fcfbe4f06c9a861e504c145c453169021e9","ssdeep":"96:FCIT9iZdBZCYkoCzq0aT8SsuCmQCsPRbCqxhmCDgs1si5/3h7sY9the:UIT0MYG3kq/CSmq188VZT9t0","tlshash":"719121a36bb435047c1a9da3b9128f977f484042808ed9b86fe032dc2e951f2e572f4c","first_seen":"2026-02-12T21:21:24.779035Z","last_seen":"2026-02-14T10:08:57.335002Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/coins/usdt.svg","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/coins/usdt.svg HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"697ec24e-402\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NG4mULdjI2zTQYDbz0nBA%2B6%2FhDDwS9%2BnMByQXEQ8P%2F1c7W%2Bga%2FveblpmgXIC40pN8giOvjcn%2FGa%2BcxJCEELBV5og7OOBKSNtGPlkDBkHM7%2Fz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79bc5210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28b536c9279c7899b5bdc991eab31901","sha1":"2e98e8417183bf8f4477f471969001722275dc40","sha256":"ba6aa32cb2b866b9fec59a43b843091deeaf5985a915b8f59bb00320f9afaa6b","sha512":"b61095c825af4b2868e8a8dcf933764d554542cd8a60caed9e4a3796f5a9d482b2d5eaa18773be469daecc4869ffe3fc7e4d2e216db388865490c02bd3d0ed4f","ssdeep":"","tlshash":"b111e1b902cca5f2f586a35de752ad5074d320316b04da89d09abc93a21b23e49dc6c4","first_seen":"2025-06-30T19:57:57.642237Z","last_seen":"2026-02-14T10:08:57.335901Z","times_seen":10,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/advantages/icons/2.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/advantages/icons/2.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 498\r\nlast-modified: Sun, 01 Feb 2026 03:02:38 GMT\r\npriority: u=4,i=?0\r\netag: \"697ec24e-1f2\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AjIJh28eROJyeOFrGcmIrepFKRru0dOKX7fSuTZKeRzlaHQUi175L9TEMPEgEiHB1vZ89wr5DZSu914F%2BWnIplp0PsX3OT45%2FcQuUpZk%2BjbS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb99e35210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced","md5":"36bc1483a1516836928e2b1d6f5ce608","sha1":"39c21335ef9d45343fa87190c25e9183ee7e75c9","sha256":"63356dac03cb13c0771c01a099051fb593e5bb754f2fc864ce01a5cc35cf70fd","sha512":"efc35e018d11e04cfe32d8a2a3189b12a182f8d9b0413162c056c262877465a4569bf5359e65bbdfd0941d17507d5faa6bda8bc1d2cc676df376effa9f68d744","ssdeep":"","tlshash":"55f00ec4a1adfcf9ca2f7a38488adc60abb37426422e2109ecb091a91c55ad1574466b","first_seen":"2025-06-30T19:57:57.630401Z","last_seen":"2026-02-14T10:08:57.336768Z","times_seen":9,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plus-exchange.com/img/logo.png","fqdn":"plus-exchange.com","domain":"plus-exchange.com","tld":"com"},"ip":{"addr":"104.21.25.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plus-exchange.com/en/index.php","date":"2026-02-14T10:08:32.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plus-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 14:57:21 GMT","end":"Tue, 05 May 2026 15:28:28 GMT"},"fingerprint":{"sha1":"3F:AC:16:37:DA:EE:DC:FB:A1:28:4C:23:A2:88:57:F6:E8:50:65:38","sha256":"6D:A0:47:87:8B:87:AD:4D:2D:A8:B3:56:D9:55:47:B7:0C:03:90:5B:F1:C5:1B:65:55:75:1D:D3:77:A2:53:1D"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: plus-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://plus-exchange.com/en/index.php\r\nCookie: PHPSESSID=qtu31dhgj5sgr3imjkl8d2ckun\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:08:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5481\r\nlast-modified: Wed, 04 Feb 2026 13:43:56 GMT\r\npriority: u=4,i=?0\r\netag: \"69834d1c-1569\"\r\nexpires: Sun, 15 Feb 2026 10:08:32 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYxAgfuqpe4mgikp7TJ7jQpD6ZmBQ5VMJBDbP5uCIgjc8CoY%2FRF25RFqlZJhfZfqA007aX4CmMsojkVIcwo%2BJEQNLMYYKkWqcJefS%2BlHQ%2Fak\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbc3cb79b85210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 32, 8-bit/color RGBA, non-interlaced","md5":"b7015bf05ec2a59082b48c1d849dc6be","sha1":"79b320e9cb8fe0ed9070dc4accbcc67dccbafb51","sha256":"28e84e01e7366a503baf22f4ba13ba5ff76bf8625ec783b0584bc081af4ee5dc","sha512":"1d7bcc0051900b8a9315020987382a9b49cb9f41ab89277375668d528085224bfedeb186547742968836d38dbc084a1e46dff1db56462a4841e5dfcca7179684","ssdeep":"96:NavDrz6WrM6/Vj00/v05vlQWRAMnffXQP7LXpWd/wzr3kdH4r:NWvrr5/VYkIv2WXeLXpQozbk0","tlshash":"b2b18e6e597ff9c9a6cf6f0060b32d0575f82311112aad8e25c0ba3f4fd6f6607a2851","first_seen":"2026-02-12T21:21:24.77441Z","last_seen":"2026-02-14T10:08:57.337561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plus-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}