{"report_id":"8e8d484a-ed96-490d-b364-3ebf4905b1ea","version":6,"status":"done","tags":[],"date":"2026-04-22T09:20:34Z","url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"title":"ShapeChange | Home","dom":{"size":152885,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2053)","md5":"7fcfbf8fef6718124eb888ae14043c18","sha1":"0579bba4f6c563de164fcf70a872797e5a3cf422","sha256":"814b2fe34171dd2e79b773c6eaf9c876eb3dafc4663ae5bf5b459dbe757f0755","sha512":"dfd648a5de7059ee971d0764e465df3f9308a63c66d06256aa449a4c229116394bc91ae78c52173dee3c344b6188e38bc00e3a33c314e7b9dc03d99c8bb36244","ssdeep":"768:5AqjreVX6kzE2Zh+0VmSNC9bOwh+OVmQNCbbOBPKEZGd7RCf7f1KNCXPNxCjlOHD:5dre5oPKEZGdRjlOH/AOiUq6","tlshash":"fce3fb3190f295b681beb0a195652b0a6bd7f707d7cb53f633ac46c10f96ca98c07a4c","dom_hash":"domhash06e652d24c1a6ea02a75bbd8f9a688ea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T09:20:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":5,"received_data":231315,"sent_data":2860,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":33609,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"shapechange.xyz","ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-28","domain_rank":0,"first_seen":"2026-04-22T09:20:37.816635Z","last_seen":"2026-04-22T09:20:37.816635Z","alert_count":0,"request_count":71,"received_data":4150034,"sent_data":84866,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/owl.carousel.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-05-01T18:38:34.504673Z","times_seen":10294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/nouislider.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c81c26999ceb485d4f9204b6ac2e83b","sha1":"472923517f13c3037e48935ef87e000920d78aee","sha256":"995d5e01bd25ecc38eab3aa72df6ebcabdc6959b693ea1a4901c2a18ca6e36a6","sha512":"50e25ee29695ea16160674b473d1a72111fc3cb9b69c52b6dae85f02fb1322a777bb09d6b15ae2d4e3e7e5f25874bb46637c01d752c61c9e323d4d5614978161","ssdeep":"768:iE4Zj4wv5Uyweawt2LBtke6swBxT0tN8bUHKKO0qSLeZW7jgSz63k0qm1GVfUPJD:Hrwv5wzjg/U622","tlshash":"08c20880b25438360a633071902fe60ea1337750b94a89b5e675d5d23c78e6c5affe7d","size":27118,"data":"","first_seen":"2023-04-05T01:40:37Z","last_seen":"2026-05-01T19:37:31.535481Z","times_seen":1169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/swiper-bundle.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f6d85f687bd563b365886fdd14c6d7","sha1":"3d10fb34a02205d6fa427ddfab5895e34853855c","sha256":"fc88096bfcd4a0f5764157ff6a9b447ad3555f130d61ca62b4268796ba7adc6b","sha512":"5d1fd43c089433aa05c8ac12de4d7be4d5aa8d664cb5e388516f23a27dcdf046ef5689ba0d3cb64cafa78b3752e5d083bb2d6b31b3a33114683e27356261dd2b","ssdeep":"1536:1IJmfG2cF8NkHfG/9+OzdolxU8GBkizrACWi6vtnV4U9ampFIzba7r5J7ifuANqi:CJiNeiMGBk90U9FpFIzO/5JeWABh","tlshash":"4cd308896220b57646e356db93e4c261a3b50540b80ac8f470bd4c9f597ec9813feffa","size":135969,"data":"","first_seen":"2025-05-05T11:12:30.402452Z","last_seen":"2026-04-22T09:22:36.108406Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/main.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18320a509b39f0e5c81d0c0cb9cc2eb5","sha1":"4eee1bbbd2fa17554cd43e932c40ce56157a81cc","sha256":"37467effa5962fdf4cc80a4f0ad2b11dbb028f266ee3d77348be5d0bdad7f015","sha512":"a9a12e6dcfa41694a5eeb5946bf55d0b8f998cae800f5507f0de725d55bef3e3d4305bf305b68489bd9912ab73782f07fb54a6f6a759e29df3f236c428eabf06","ssdeep":"192:+JgsCExW/+eLS9R4RnQimivZhiJimnHiWip5+iJiyroP2P1yfUQJZYiridLYiriI:+GsCE3eLK4RnQimivZhiJimnHiWip5+k","tlshash":"43323f1f701606314d7b73b7aae6a348fb71102f684286027c6c4a84af74d96a7b1fd9","size":11714,"data":"","first_seen":"2026-04-22T09:20:42.877013Z","last_seen":"2026-04-22T09:22:36.139177Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b62d5f815696c63e726bc1ee4d76ae89","sha1":"0ca7ecbf8d5f98575ebf07441601fbb2c3333596","sha256":"9700b2ad152e3b9750078617a1b260ea2f129212786e14619261467f46b6507c","sha512":"1d1eb6cbb98b8d6bf2bd78b1bdf70f625829be28dab31b6d85589360be7559749f3af7d61cc4fab09ca1e5ae4921049c75e88bca0f58ce0e3a9c134e74ccc766","ssdeep":"","tlshash":"11f09e3b3687bf1214a2d0b9039ee400032a21a79045f919bb8e07884f6411e59f8fda","size":575,"data":"","first_seen":"2026-04-22T09:20:42.92398Z","last_seen":"2026-04-22T09:22:36.179868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-01T19:38:43.282488Z","times_seen":320506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c0e7c46ef3358a47f5c6b9c77695109","sha1":"e40a0850c9375020bec7b92fd6cc97bc63ca08b7","sha256":"e97c86ff7cd30e1eca090e6f8e4044159489d9b51d9bf3e278c8ab6dd6eee96b","sha512":"8cbaa6b4226e38daabd1d344501ae359a2486bbb17044664e0974066c510a71b62c6a50930a3343659072143e77cee932defc0299c4955b6ff5408ef230d4c05","ssdeep":"","tlshash":"a5f05c5628ab503442b721399bffa0097951250b690aed74b95e8c011f5db5f48bba88","size":641,"data":"","first_seen":"2026-04-22T09:20:42.924812Z","last_seen":"2026-04-22T09:22:36.181381Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/slick.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"777da4aaf5b960636dec0fd4e50ba489","sha1":"9a94038ccae90e6d2a0f9cb61f79ae7c70320287","sha256":"e1a52c0a06fa9f65e015b02e7ec463fd621211a9d2ae44b6660597900e927fbb","sha512":"9b810776ff98b94fe765b192187064d2ce4921fb60baf4c797c3302d332f7e55556e54eb070cc8917f61aa74191539a294457aa18d54f5e85527652695c6f848","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYK:EPrYdlNixEePiYK","tlshash":"6213a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42864,"data":"","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-05-01T19:42:39.19419Z","times_seen":12549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"365534b09f58518e7fc5f6823b21fb01","sha1":"eb40b033c372f821848c613a4371b42ec81084d9","sha256":"7204189323e2a5e0aa65d07cdf23f033101fc6fcd8f81c5c9160e570add146b2","sha512":"8c49a6f6f192c367b8b5525a34709701289ed4cbc38f77eee276621430231a78e53e662382d017e2ffadc179dab1955c4fd39424c66e6e58788cb60ab105a99d","ssdeep":"","tlshash":"d2e02b8e38a5105b56e3306985df540a3012a04718087e047e4c42605f79d3d5562b6c","size":327,"data":"","first_seen":"2026-04-22T09:20:42.925601Z","last_seen":"2026-04-22T09:22:36.182563Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53c4985992e1c328f24c55dba63d3d71","sha1":"0c829eab370a1be2f6a988a7fbb2863d3746f9a3","sha256":"9a25ccad2aea270fde5087d0dd3ceb701f7bb506e9b13d6bbcd0f7d372b5fbee","sha512":"76dbf4a2ed231f691978c139c1b24599de0bb6da8f84585e2995634f7bb397cb731e3d8446052e8c768876601793b7b15218b06e4fcb3f0beeb2b2bd0ecba657","ssdeep":"","tlshash":"5af0e9048d5b1e128173c8efaa42a812b5ca940f9234f305737f93b44fd0b282127af5","size":532,"data":"","first_seen":"2025-05-05T11:12:30.444069Z","last_seen":"2026-04-22T09:22:36.183627Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4868b3e31dbbabf66d3ca4c6103f3845","sha1":"73bc922df5e06f2cb07117598f09c856bc23f5ba","sha256":"612c9ce30022aa596867d1340ad1a9420b11c3922eb4c926d65d1ce7191018fb","sha512":"0ba4731326900ac96ccd461084f1a93a5762884c0b39c3b64a105b9312d5bda7d1350d7d6254c6ba41ebaa89e443f56917152b1654e76fd3d029641649a98f2a","ssdeep":"192:VIhsz4Oj5M0XabaXt1M0qNqWPIxzCbXCPt8Zq:V/MDmDMfNKzr","tlshash":"1622022436e3267180f371606af794053a3bb6af5403cec8799c8de02f99a54d8daf59","size":10107,"data":"","first_seen":"2026-04-22T09:20:42.927844Z","last_seen":"2026-04-22T09:22:36.184356Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/global/js/axios.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30e194541bcdd371e8fadf5961d4bee5","sha1":"6238205fa0564bd8a25b90fb66233990e46c8d70","sha256":"ea52c2604519304144d7267cf90f912ee6b092b2c5505576948568fe653dcac0","sha512":"07d7a69d6ceff3c199874a2295be37e1c9c8593aad4c969929de6867b1f56b6528f51a7ad85d33e3617c5ed4bd3e00b211aaa3d3b8d3c8756d3c7a6068755520","ssdeep":"384:vtuDoBdyteApZXfgHH7MsMRrVkkaFW4Um6kxTF6T9eeiu:w0kvRrVwWQ6k5F6T9e5u","tlshash":"625295ceb4a1b09747e720f0809f4a0fb2ba552a644dc4a0fa60e8f66c7552d8733f5d","size":14357,"data":"","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-05-01T18:55:01.658403Z","times_seen":675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/global/js/notiflix-aio-3.2.6.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f221d28a789bdfaa8759bffd65aefc75","sha1":"d066fbc8b969e6f3dad42818d6a330f72cac0872","sha256":"f951e926f9d31da66e7971cb72c61c657f42d641c62aaf77b0f3142fcdd5bac3","sha512":"6558b24857388109656d5341bdfc83e239b39b3b9d863535f18004f6bc2b3da03997fc9505385f3a70e97fff647368b58781acf607490a60eec831b6d3ee29c8","ssdeep":"768:hpax78NlFR8wFwmPUDkhath0W+9BfmDkRAl6faqEinATJDv5c4MZEwXmmaHz8pT6:HTL8eUDknRAl6fmRc4MQU74U2S8E7CJv","tlshash":"9693faeb6181011c82574be32bce5508763ab8d6a5120cde73b85c2a87d67cd67e372f","size":91016,"data":"","first_seen":"2025-05-05T11:12:30.391592Z","last_seen":"2026-04-30T20:38:57.931514Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/parallax-scroll.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb5ac2eaf845ad54acf8a04b4e2365fe","sha1":"6efe644b858c2f6fca10425fa736ab7cde2a965a","sha256":"8177305204a6ee458688396a7bd4855fa54cc20808a8bb09311398a72e946565","sha512":"00d9ca18b6074dc0a68a85b55fc4014cafc72d991571f4bf23141bc07b3fad60d43a0e6f0a090a94d35c8e0b28f8055cc305f5fe42e92b8d7bdc49ece03d0567","ssdeep":"384:k/wxTUBDVOkiVNyHg2mPX+xvx2R8m3Yftxm5ih:k/wQDVOkiVNyHg2S+xvc33OxN","tlshash":"3b627348e502152a91b77339cfae079ef77a662741128026be5c868a1fb093453e4ffd","size":15355,"data":"","first_seen":"2025-05-05T11:12:30.415756Z","last_seen":"2026-04-22T09:22:36.138377Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/select2.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6261aaed8d3c438b7cd60241462bb6b2","sha1":"c61d3ddf3aca8c24d0cbc10458d5a2177d2e62a7","sha256":"6bb9759501fa8c53c40288058344ca38b1e8aec830575aa543b63bd0afcd61f8","sha512":"d3f2a632763d292ee4ef426bc4b9f85484023a936f52d59381c8396eb077efe9d317f7097c2b696d1dc1db14502b8a48c805b17a0c4c6357c6d656a0c355c235","ssdeep":"1536:0ZoMrztEsa7loyQYTdqQ3RdOpbCo73pcdOIRb8EMc5g3PywNaQec5AY7:0mWEh2yQYTdXnOpbf73pcUIRb8EMcq3x","tlshash":"28838515f3e33b37825f70e26c9f9c4c7234593c51865948661cc9e8987c828a7beead","size":83309,"data":"","first_seen":"2024-10-04T10:44:16.250189Z","last_seen":"2026-04-30T13:07:51.73896Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/jquery-3.6.1.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f1950538c6051b90dae76087bc65424","sha1":"f88af5a8061ad3170d0a7155636e798797ef9656","sha256":"24c7030c50c1045cfefddac2d403f4bb2043b34183f6887f5c88a3e12e0236f9","sha512":"dc52b97ac0efccd9bce32718d84a8573153688329455405411d52fc0b5d3dbbaaf9e038b57921bad43115d151994123948739b329ab4713d0e60b26a67efcf85","ssdeep":"1536:RjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvv:RdeIygP3fulzcsz8jlvaDioQ47GKK","tlshash":"9593f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89666,"data":"","first_seen":"2023-03-09T23:12:28Z","last_seen":"2026-05-01T07:58:27.391535Z","times_seen":674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/bootstrap.bundle.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc757df9e9699ab0a588ec67a711b75a","sha1":"bb4d5c07ede00143624addae0736aa3a55d879ec","sha256":"17f1006a38edde3e8b1d4444596e3b990ec9fc6f27f4362f8426de051443e07c","sha512":"9f1ada7d84ba2075ce202691e19bf1312380b64fa99ce58f2b3b2304e1ed5996ca89fdec7f2488b84b7d74c01b380dddbeeaad30026bd66fc10d83d028e45cee","ssdeep":"1536:azlMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CjcI4BqQM6k+:Y4Fj8GPwRM3CAI4BtB","tlshash":"7f73c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","size":80502,"data":"","first_seen":"2023-03-08T14:35:31Z","last_seen":"2026-05-01T15:36:36.830617Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/img/accordion/plus.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/img/accordion/plus.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 483\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=agyuQ5ZGdm4AchmwbbFLDjG2vrbeAYZZy5XmBZhN8Zi97xnCZI%2BsRblJqAwFG167IMYkY81KPZR4%2BxGGK2wPyzKQc5vYy1gT1WXxCF0wLy2eWtp7Lo6tgpes6G0Bwp9w0EU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d1cacfd56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 16-bit gray+alpha, non-interlaced","md5":"19f9de04854df326bff1140e8e8aada7","sha1":"b062171ebe43391fa92e6e1247b0286f84f44755","sha256":"661cbc940503f1add3cc310f77c83c786872260d70c2cfb969a4f046c066e548","sha512":"071ed9d857037aa8975f5a0dd6efdbe935b98ec284720257d94301cb0104469c3ed1c4f8502746a586c59b1fd5ab347558525365ff6ede9a1b0c330cfba6f2cb","ssdeep":"","tlshash":"fbf09ec5f530c5f5ca432b86013b168ae862048a6a521919f460d60c9835f8665b4650","first_seen":"2025-05-05T11:12:30.397215Z","last_seen":"2026-04-22T09:22:36.118632Z","times_seen":13,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T09:20:11.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.29\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; expires=Wed, 22 Apr 2026 11:20:11 GMT; Max-Age=7200; path=/; secure; samesite=lax\ncoinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D; expires=Wed, 22 Apr 2026 11:20:11 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLyHv14NrH49GvkialURiuuHESCPvhuCNrjGyx2%2BqfCiYq90Zdz3OacXdpigp0aYovSC4k5UqjnlJ9CwbNwkIxGa4r5pWIt3iBTeXjpgYNbLkUIv%2BiOOP94OrJWeKhDVJJU%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f038d166a608be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.6.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":59461,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (528), with CRLF, LF line terminators","md5":"4de37a8d6cc4877dae046468f6f4440b","sha1":"ad609e72e14dbbf36ae3c39e202df6faf9d46cf4","sha256":"0a61f19e7bd459d4c5bb89655d7391dfa0fb9a1a99bfe19cdb6262d5217f18fc","sha512":"3659b7a106d9c88cf321b648e56638046092a69715b83ae4f209074c23724db59ea696ee01733a035aef10e21b40c79ebe30218ea70f0335cde04277059863a0","ssdeep":"768:rR+rjrq3a35sSXab7fWgcGe+uOlAEBRpbi:rRmrGesSXk1Rpe","tlshash":"d2433b2124c5253740b3d1a66a71ab4affa6924bc60b5648b2fc5bd71ff3d02cc4be19","first_seen":"2026-04-22T09:20:42.869307Z","last_seen":"2026-04-22T09:20:42.869307Z","times_seen":1,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":90,"dns":78,"connect":1,"send":0,"wait":229,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/slick.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/slick.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 508\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZZUz8hdM2JZ4QFIo3hLNRvkg0Qexr1e5izkX40QZa884rH7SHW%2FyEozuFHiCW5YNr3J1XJOCtXeYuUGE8syV2bKE%2BI5d4HzBVDalCxx2dIfdB6SUNMzqkI4D6qem3vHTSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d197cbd56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"63ff27bb7abb9841e71b2a4da4c1e8f7","sha1":"6aa5fedfb15186b5dca0c63e23431dce39b73ba8","sha256":"47c9f845268187ce39ae6a98b76cf4a2302c18d31a1825c283288aa55f9b7b0e","sha512":"54219624bd73c8713094e925d62df39fef38723413d19f55c3f10acb0f14f782eb8a35a0714d8aedc8f3a5fb57b8dcc5dac6164b07dd0262808a651638bebc89","ssdeep":"","tlshash":"f9412b9c0552c1d68733c5544fd38649edefa0930c251698bacc47098fbf6e8a9c5e77","first_seen":"2025-05-05T11:12:30.401068Z","last_seen":"2026-04-22T09:22:36.133466Z","times_seen":10,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shapechange.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 17:38:59 GMT\r\nexpires: Sun, 18 Apr 2027 17:38:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315673\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-05-01T18:12:21.057165Z","times_seen":6174,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/JSCDiBKTFavDsi2eaUZzYURctRMhKL.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/JSCDiBKTFavDsi2eaUZzYURctRMhKL.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:11:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1654\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LG0%2FLg%2BtCFBZx%2BiYfi1qgU9eY8m9vUQ4BvmI45Ee9q3%2BGnsxBs3qBKAEwfoKom0U1j78YinFc26H39Y811wH9mdcisWTABw5ganuaeBHctYq%2BxBDBvqJAL%2BIe%2BYW0ysWou0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d1ffd3e56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c1bdf38a8665f4c9db528c4a9f348f5","sha1":"5fab35683fb0330b2dde15d15fb94394f1bbbc10","sha256":"d9b42e3388bb6338ea8f2715e112e2d192ad3bd0ecffdb7af3d22e87234f9c7b","sha512":"6244f9c6c401f4355342e98917747904269ed7bcea2c87667c8323bf793807e307d61fbd5f5d7b2606fc5131d4ad8d1e2a4ec7b265087edb7c326dafcb5582c1","ssdeep":"","tlshash":"a0310aa296914d70c3343e6a56d908cd80d4a11287582b2878dd6df620a10f13b7dac8","first_seen":"2026-04-22T09:20:42.872032Z","last_seen":"2026-04-22T09:22:36.165589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/img/background/bg-dark.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/img/background/bg-dark.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 286793\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0UD0jvSByXnEbp9gMe0xkcSu%2FcbvGfRmUyittbswG%2Fb8re6mOwAfUCeZaal62WqvfjIn3y2UgsWFxqk8s5nhW9STB4BQgaTHjIyoKd%2F2CA9g1MZeuQ2zOR7wWR9ux8%2Ftlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d1cacff56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":286793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 850, 8-bit/color RGBA, non-interlaced","md5":"5d2705f631cb6e41f4feeccfc04bcce0","sha1":"5eb8d8ba59c37d9f12286ddb6486d24993521b1c","sha256":"fdbc2cbbc3fcd00d4fcd44e3823e1dc72948010ccdc001b6a9962727b4488b27","sha512":"b0bfb5058a037803adab4b6f9b2c8e81ccf529f9e809508aa9a229e536ab612fb66b3567c59bbcce4a5365d4d4f80c7f2bf9daf524d3a7532e0ef15998108e82","ssdeep":"6144:Zy57AlUM+TNi0jh8ZpaOgGtJ8YK/qTPvdceDvQzo9BTHseT:Zy+mMOi0jEHJR5V8cZ","tlshash":"be542389182944efc7cea4b5a81dac2f132c5a68fd181e4b087381c71736f2e762df59","first_seen":"2025-05-05T11:12:30.38792Z","last_seen":"2026-04-22T09:22:36.12644Z","times_seen":7,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/coinAnnounce/KUWDtctzLCEsP9etbmK9pKJgPPEBUB.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/coinAnnounce/KUWDtctzLCEsP9etbmK9pKJgPPEBUB.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6592\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUsLEuluA%2FvX%2FPJPpePEAbPWuNqNmAuPXSyA3sLs4A79wv3chcimbXHm041BMeeTUtCyRG6hHVek39VY51zNGuIbOsB5xH5ZkFKuEaKFaErcu5k%2BE2pYWgyVNziajur9pBk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cc456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5441379251fe7354120d9d32cd520dde","sha1":"9fe4ce13177e704921ed8ac4c07f02554df0456b","sha256":"5c6abe1eb545f7a1ec249749510d812e44916230cb7d557097968e86cc68a727","sha512":"0bc662605a63900b17721b6e5c3feb707fb6c15d56f1a1a0dc4656a433458a9a2eef2f9b86ef900196872c99b83a1439f295564453f1c16218a290b791d34a20","ssdeep":"192:Euj/JyvTs6+rmuGZBIJ90uLk4QrPlz/SE:EuD8vY6smuG3ITMPJSE","tlshash":"12d18e2cb172433b1fcaedd5b78426735a8e0b08437907544e7265ca5997052f73673c","first_seen":"2025-05-05T11:12:30.418441Z","last_seen":"2026-04-22T09:22:36.112713Z","times_seen":7,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/contents/dot.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/contents/dot.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 19 Nov 2024 12:26:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1355\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z3xf6mgAkLLeZC7iZR%2Fx86SJJPTy5rPVzKu7yWucttz3%2B33vFlzSdzS9PfWU3x4CEMGGW82pWLe0WjwKSOI%2BUIPDDTLGeZpmV9TLCNAJjfEvD2RdUe3LaexSrbb%2F%2BnMtoGk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cc956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 69, 8-bit/color RGBA, non-interlaced","md5":"5f17b228884386081f1cc01b206d199b","sha1":"811cb6017881b4f3a7c2012c95791a66245233ce","sha256":"4cc027ed525caa534eb5704279e3f1aac86ad4e783e62bb99398449192dd5c6b","sha512":"b24c14ba31fff834050c3ed2ccff68f38937adcc53e2e19a31ed08617cc7199e38713131ff1d0909ee0d09a0616a55ac9bf46042c1cc2de3e94c0b3354271d69","ssdeep":"","tlshash":"b121d8eee9019e6e4d8f0274a49b5fd8453f057605922f14624029230acd72937a2b6b","first_seen":"2025-05-05T11:12:30.352261Z","last_seen":"2026-04-22T09:22:36.131919Z","times_seen":5,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/contents/border-round.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/contents/border-round.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Nov 2024 07:26:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16461\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyyUMbnSLugEzjfkosMOHHhhqAOf%2Fzbq%2FtbM%2Fg0%2Fa5LoxrFv5OKorBmMJgTN78DEjOT6YdfypUr2rYqnhELCcQ8l8sDp1pcfpFAqnrNvMoEHtYXrxZ8tkLQ07EvnbfM11yQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198ccc56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"756a1b712c324af09960e539e2a0c0ab","sha1":"ba2729d6555ad05ac764e6fada6ba7ac181ac24b","sha256":"ac4295d17b1fa41b866d38be84275ab3f78bc4994dccbba4798bed803be614ee","sha512":"a3d736e350f46557e84ded91c34007181f8f00b9c11049aae0692df3e3635a50dbed22f28b51009a611080749e441562fc707e778b3793889304edafeccc92e1","ssdeep":"192:JS31Ja6ycq8DM4NZz6WxUMsXPibp8fRjaDWR86G5wHCdgLnAS4wP//V8QYowK3N6:w3HywI4NZzUw0y6tgx1wP38NK3AJj","tlshash":"5372d0616711908e2e8d39b8161f74c49e721fe81657cb16a4bc4d26fa5080f8bf857e","first_seen":"2025-05-05T11:12:30.360065Z","last_seen":"2026-04-22T09:22:36.177556Z","times_seen":8,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/global/js/notiflix-aio-3.2.6.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/global/js/notiflix-aio-3.2.6.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15308\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05KpubFKLb9uOXFmQAncHQ6Qc05WC1X0SeW0p3bkKlpQeiaISIomnt8C48%2FXQtHOn8G6YwlY55iB6BOYzXEe%2FtXs5pQA6rvtLPR7sz8hEuNIN7XcVVKb%2F86RqVw%2BT6UI7Bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd256c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":91016,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65339), with CRLF line terminators","md5":"f221d28a789bdfaa8759bffd65aefc75","sha1":"d066fbc8b969e6f3dad42818d6a330f72cac0872","sha256":"f951e926f9d31da66e7971cb72c61c657f42d641c62aaf77b0f3142fcdd5bac3","sha512":"6558b24857388109656d5341bdfc83e239b39b3b9d863535f18004f6bc2b3da03997fc9505385f3a70e97fff647368b58781acf607490a60eec831b6d3ee29c8","ssdeep":"768:hpax78NlFR8wFwmPUDkhath0W+9BfmDkRAl6faqEinATJDv5c4MZEwXmmaHz8pT6:HTL8eUDknRAl6fmRc4MQU74U2S8E7CJv","tlshash":"9693faeb6181011c82574be32bce5508763ab8d6a5120cde73b85c2a87d67cd67e372f","first_seen":"2025-05-05T11:12:30.391592Z","last_seen":"2026-04-30T20:38:57.931514Z","times_seen":35,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/main.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/main.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 31 Mar 2026 14:02:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2556\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tkqL8fCmA5cFeJDIZxIC%2BxcZJnaoJ1w3wLXJcJiqP7nJvnGHL1SZ4E9adKZzBrdrhEpZE2ufWBUCOjrNL9HujMi9%2Bb1JmlVFEoZdxHtRQImgcqen5wHKkex%2BCrGfeCgNNmU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cdb56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11714,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"18320a509b39f0e5c81d0c0cb9cc2eb5","sha1":"4eee1bbbd2fa17554cd43e932c40ce56157a81cc","sha256":"37467effa5962fdf4cc80a4f0ad2b11dbb028f266ee3d77348be5d0bdad7f015","sha512":"a9a12e6dcfa41694a5eeb5946bf55d0b8f998cae800f5507f0de725d55bef3e3d4305bf305b68489bd9912ab73782f07fb54a6f6a759e29df3f236c428eabf06","ssdeep":"192:+JgsCExW/+eLS9R4RnQimivZhiJimnHiWip5+iJiyroP2P1yfUQJZYiridLYiriI:+GsCE3eLK4RnQimivZhiJimnHiWip5+k","tlshash":"43323f1f701606314d7b73b7aae6a348fb71102f684286027c6c4a84af74d96a7b1fd9","first_seen":"2026-04-22T09:20:42.877013Z","last_seen":"2026-04-22T09:22:36.139177Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/img/coin/5.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/img/coin/5.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7514\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MR%2Ff29unnRf8mFTKYbHixPAc6mmfrvp5xNgnePDTrCwqh1xyk4R7EZILFgKViK0sJwzHVRQiJ3T8amv%2BNST2F%2BaFxoqBGJqe1oh%2BzfixIhVSzWC7%2Bkennr%2FURDMxNTUaPo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cca56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 98, 8-bit/color RGBA, non-interlaced","md5":"44580e49ac5f3d456bb26559388c60ab","sha1":"fefac9475bcffe62ef868a23d07b608ffc1b2fb8","sha256":"b5d5aaba90ab7ac10876e91ccbb3686122741389057ce9c1c192bcb412e35d57","sha512":"6f53183fa8b9d379475ef6698faa6639e5440c2344b45962662b2aab2b0ca869c00d1c7c46fd98aa68e68716f16c331b4253fce220bd0d483441284a812238cf","ssdeep":"192:OS6JS84HGSkmfp+IbBBXhn+WjNG5uMpUM9dCZm/+:xU4HGSkI+KBF+r5zBqa+","tlshash":"21f1afd358965c91d5664ca01270bbf4a2fa8d4edb3c24981210eab4ee586c764cbbc3","first_seen":"2024-06-30T06:52:28Z","last_seen":"2026-04-22T09:22:36.123568Z","times_seen":50,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/global/js/axios.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/global/js/axios.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4760\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKFy3WE%2Fv%2BD1an6Jv66TJTqtz84JGRoAkKBH%2BNvZJiBeRsq70iEwUi7gLzQng7K%2B8BWOnlDZEJWbalVAtoQsM%2FA4i0%2Bo3%2FfNuR0cBhmRL%2FZ8hb3XB9yNx41kPnEM2IWc%2FfI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd456c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14357,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14271), with CRLF line terminators","md5":"30e194541bcdd371e8fadf5961d4bee5","sha1":"6238205fa0564bd8a25b90fb66233990e46c8d70","sha256":"ea52c2604519304144d7267cf90f912ee6b092b2c5505576948568fe653dcac0","sha512":"07d7a69d6ceff3c199874a2295be37e1c9c8593aad4c969929de6867b1f56b6528f51a7ad85d33e3617c5ed4bd3e00b211aaa3d3b8d3c8756d3c7a6068755520","ssdeep":"384:vtuDoBdyteApZXfgHH7MsMRrVkkaFW4Um6kxTF6T9eeiu:w0kvRrVwWQ6k5F6T9e5u","tlshash":"625295ceb4a1b09747e720f0809f4a0fb2ba552a644dc4a0fa60e8f66c7552d8733f5d","first_seen":"2023-03-07T01:10:40Z","last_seen":"2026-05-01T18:55:01.658403Z","times_seen":675,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/swiper-bundle.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/swiper-bundle.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 36532\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEZRMT%2Bc5hlFF%2FQcXV2uxkbdkq8XxrQLgeQFAg7vQeVsf%2BTzmlEjKhoGKuASY9Qg%2FBP2nggCRkSKVg%2FFLW402u1TNHMdkSTCEW6Nv1uGp5ptM6NSr7S2J4pxqn%2F9urFlBQQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135969,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65267), with CRLF line terminators","md5":"31f6d85f687bd563b365886fdd14c6d7","sha1":"3d10fb34a02205d6fa427ddfab5895e34853855c","sha256":"fc88096bfcd4a0f5764157ff6a9b447ad3555f130d61ca62b4268796ba7adc6b","sha512":"5d1fd43c089433aa05c8ac12de4d7be4d5aa8d664cb5e388516f23a27dcdf046ef5689ba0d3cb64cafa78b3752e5d083bb2d6b31b3a33114683e27356261dd2b","ssdeep":"1536:1IJmfG2cF8NkHfG/9+OzdolxU8GBkizrACWi6vtnV4U9ampFIzba7r5J7ifuANqi:CJiNeiMGBk90U9FpFIzO/5JeWABh","tlshash":"4cd308896220b57646e356db93e4c261a3b50540b80ac8f470bd4c9f597ec9813feffa","first_seen":"2025-05-05T11:12:30.402452Z","last_seen":"2026-04-22T09:22:36.108406Z","times_seen":15,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@200;300;400;500;600;700\u0026family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Sans:wght@200;300;400;500;600;700\u0026family=Inter:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 09:20:12 GMT\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32923,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"62a56b9a1fc68e82a4221a10de5cd4b0","sha1":"d4a7dd592846cc4aaf95d1989d8a83c108a855ee","sha256":"8d9bba9454d03a2db67cd2add91b12cc497049b62390c2f33189d336b7672d04","sha512":"bd54c388d9413d125766c995a561960b829c22b70b5406e204ec2b2380a7cb9036183209b1ed2cf36849fc4a91273667621eb60c35a350b4a67636253f7b89f0","ssdeep":"192:XHnTl3a2Ld5HIkl3xdL2oHZdl3gkLTHHi2l3fTLkWHTnl3uiLZ9HkIl3VZLitNAZ:X5rndlHH1BjfUKYXuM0p2+g7GQK","tlshash":"a0e2e991402ba440ab431dc233cf7f36ae8e64846485d2bd6ffd1da89ceee26136475d","first_seen":"2025-10-11T17:53:35.796402Z","last_seen":"2026-04-29T02:58:30.641513Z","times_seen":9,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":104,"dns":1,"connect":10,"send":0,"wait":19,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/KsuT7jXXS8Xg4MDiS8vbp1Kkokxj7y.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/KsuT7jXXS8Xg4MDiS8vbp1Kkokxj7y.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 02:24:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1526\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxXdeHfntjOUDYFeROYwByC26UjS%2FjP0jfAEgnkCBqgbDhkCvtdSpE%2FPSniKIl1%2Fj%2F9eR5ykwmTemogU4v6qEaeuHpm59nOsiLCEJyCRoByyvACiDBvjlXhHHea6iguI%2FPY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d203d4256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"156aab63ed6032ae2654c4ca08e23eac","sha1":"60ed8a2421da6113c8e95695990df45845d5b7af","sha256":"7698a40d49b0e4b6e78dddd8608b644ec425dfd07e38ba6702b0e20a28e70e06","sha512":"77981aa138095b2b4c93f392c00da7ae31d50ba5d455d10807607e72f24fc611db6fee473eaa5927c12480ec6473c5421e2242ca539bd2c124e0c548b2884e95","ssdeep":"","tlshash":"5f3197c2780d67d5d5b21f1519e5055a676bcd78414cf89c2508b7b289f8492e1587c4","first_seen":"2026-04-22T09:20:42.880166Z","last_seen":"2026-04-22T09:22:36.154479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/201YlkaoGwTsw08VZpHoJ6PQDA7YjT.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/201YlkaoGwTsw08VZpHoJ6PQDA7YjT.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:20:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 636\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnKIfX4BvoUnY7p5keJ4MRb1Qr%2B6fOABHMtz73%2BKB3hFuE2sNce1w4WFK0%2BMdAP54tTUhKh%2Fn%2FyC%2BBkNR9qQHCashLAIWC%2BBWQhs90NeVSUVqlcAY4a%2BxpLJE5nXFQj9iCc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d204d4556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"08a1f02afdd773733b36cbe1bdba81f1","sha1":"2821a432149e319a4f8bd5595074d121b7917f0e","sha256":"666c88986d8ad4d8970d79ba11c783fea858bff9e8b6e1aa7ff02fb25c80019c","sha512":"8d39be0100e3e344a5094ce9959363b63e28638a02195e0d15ce5d792a3db09c917181ce20d4908c03a6f34bde2857393413841cceae87a21d72c5d69161c1dd","ssdeep":"","tlshash":"40f062c42bd3907cd5ca369a2baf5be449c3db118d9818b00545969b993202988e98cb","first_seen":"2026-04-22T09:20:42.881411Z","last_seen":"2026-04-22T09:22:36.122439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/fJqSAQgsESZ41SfaNQUHZRL2iexhwI.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/fJqSAQgsESZ41SfaNQUHZRL2iexhwI.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:52:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2434\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bg6NfU%2FIdYTpgL01yjaykiJ8dn2ITQJGJAlygTCNepOmgk5aFhZ7TyoNTdO7RyH884NZ%2FX67cgPEuHfamCvkYAYOSrv4UZS0GsyV5p9YvrlgdjIfP4r%2B%2BA0HjVqRFIvcgMs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d204d4756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a09405c255389e63ac82794019ff4bae","sha1":"652e84f97c0542953d46588fc7fa6764419ae000","sha256":"97360cee1a4ee6eaf04cdbf6f3a4c4e6d9e382e9af5611a09941e92fffd557e5","sha512":"e31d54c410eb0068840857d7a3163c8e0cc5a9f79fbbc64f1c1b3c41e0600367394d530848b2c1d6b4b538858b0f274c46de8c1ab8020d5628750e8038252031","ssdeep":"","tlshash":"6d412a71f0b5449e5ac71ff726f03a323e2226ac1437a552648317b83859b306a2c722","first_seen":"2026-04-22T09:20:42.882222Z","last_seen":"2026-04-22T09:22:36.09054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/contents/newimagess.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/contents/newimagess.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Apr 2026 14:48:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 116595\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6Zbsz9ZmJAI1cqIqqNgZDMvl5oD9kmHLWffq15Byc3EJF81UHb3U2T7mtpjtfUyAAaK0AFSmM113gX4JVNt27rZ2vWx8V1FAr9fvFojFwP2fOboxx422rVseJsEz80Wfz0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cc756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":116595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 258 x 384, 8-bit/color RGB, non-interlaced","md5":"700b128c4488ab01899b4fda0398ebc6","sha1":"0e513c753098ec0cae50195db24c21f6145510f2","sha256":"5b3587333851430615452fecd360f8a78ca20cbcc1a8c09c69e3510ca20586ef","sha512":"ca3b6478a409fd0e29d0dfa4efccba132f2740e032ffe1f972b811a468c7303c6bdd47260ebe1fd286f122859cb786dac26bc7eaffd66233783e8642c8ac9969","ssdeep":"1536:l81633AZlYxdiOlN1N0AK2YiDf58eDsY4WOlux7ZZjPYMiJ3juUibtkV9EkhY7w+:a10liOlN17cIDOAPYr3ihtQRh3IHH","tlshash":"1bb312f876fa28f410d351b95a0b1c958323ca5e9fba5135bfc403b9e69f60cc5a148b","first_seen":"2026-04-22T09:20:42.883302Z","last_seen":"2026-04-22T09:22:36.116296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/parallax-scroll.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/parallax-scroll.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 May 2024 05:36:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3423\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXC9%2BQC3%2BxNKTPsft7f6WTFdzIjbtH5i826MDO1qKXmCFs4JVOgY%2BEHHbbhyoISRpaPtgsWekeaSzNeDneb7cszBovykpvZmXFxzYpCZC7nu8pDpuzofLRYXHeb%2BM1tmCwQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cda56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15355,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (859), with CRLF line terminators","md5":"bb5ac2eaf845ad54acf8a04b4e2365fe","sha1":"6efe644b858c2f6fca10425fa736ab7cde2a965a","sha256":"8177305204a6ee458688396a7bd4855fa54cc20808a8bb09311398a72e946565","sha512":"00d9ca18b6074dc0a68a85b55fc4014cafc72d991571f4bf23141bc07b3fad60d43a0e6f0a090a94d35c8e0b28f8055cc305f5fe42e92b8d7bdc49ece03d0567","ssdeep":"384:k/wxTUBDVOkiVNyHg2mPX+xvx2R8m3Yftxm5ih:k/wQDVOkiVNyHg2S+xvc33OxN","tlshash":"3b627348e502152a91b77339cfae079ef77a662741128026be5c868a1fb093453e4ffd","first_seen":"2025-05-05T11:12:30.415756Z","last_seen":"2026-04-22T09:22:36.138377Z","times_seen":33,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/oCQI1BTqrAwpO0LSQ6bjPoqaHMpJcJ.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/oCQI1BTqrAwpO0LSQ6bjPoqaHMpJcJ.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:40:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1354\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qusMNAb%2B%2BM7LiSd9t8llF8WPvTOFACt2t388AkgWIC%2F%2BsnMcZ8b2%2Buk3NzhuU23Z%2BLA2g73tDtZl02oYV8HXGeNTqP3Eevyb5qfAt0vhBrCtLqQoNIikKXERYYKoLPzttOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d206d5056c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a65e50f7e939dcf4568e61afc83d14d7","sha1":"e2ad9c82cee9e557e6b89bdbb1360f43e4a1e2ef","sha256":"fd848c867b5fdf96b9e9eb95c301a574ddba78cb5a02b15ccd1ae90dc532fa55","sha512":"78da4a6548493d82cf26e459ce32da097065af58de37a4d1f9f6e40b409e51f1f3866023ecb056812468bee23c5f14d33ad29d016d70ee68302d645fbce3f862","ssdeep":"","tlshash":"21210b8bfc0c10264c67991155fc57a88455094ae3a758600f4169ccd891478ab67ff4","first_seen":"2026-04-22T09:20:42.885075Z","last_seen":"2026-04-22T09:22:36.096436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/xv3E3Pu5hn8vhJvPfwLGTbzOkVbmCb.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/xv3E3Pu5hn8vhJvPfwLGTbzOkVbmCb.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 13:43:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1798\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1KoD5HpFE8On9pQqV%2FySY0nau5V43t%2BYSdgSo%2Bxol9h5%2FwhTsVuml6Ezz%2BWoe625%2BsPzJSWZAK860m1qR5CCEJPv2eopjGnsQlNWJZ%2B%2F0HKJyqO3NoSrVDE3gbuxvp1O5wg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d207d5256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1479db990578ca3777627f5c32d41da2","sha1":"bfd44d43cee2e513ec861dce53b6c77d92ab33f6","sha256":"9d7bc73e1d5c28f20e213aec9b1e1161fe6886beb79391923d4190e00839138d","sha512":"cc95bd511bd23fba8b349190ca6fa00c4a330e084bb64873bf3199c5098edb12f605437d9dcdbd84c6a91d1139869628e2f6996a46431f773203a8ee1f21270e","ssdeep":"","tlshash":"9f312bc775e04bdc9ba0b450e74843254f273210eeaa0c8eb9492c53539f4822da4d12","first_seen":"2026-04-22T09:20:42.885956Z","last_seen":"2026-04-22T09:22:36.10566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/r4pSxbC5N82JVN2PMJeMQm3ObMAIfl.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/r4pSxbC5N82JVN2PMJeMQm3ObMAIfl.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:44:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1146\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9UaH9QT8hv5XuwXSsIe3DinjO90izyScxuEbjGl7%2FUnAG18LIiTPfuk50o7UaalugK9bEb%2BVkBcNSRZggZfVhHj04SVN9CSu7mZsGS2O2LhVksQSFGwqHGDw4yKz7E8SfE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d208d5d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3661a7c7c518b3be1753ab23852c735b","sha1":"ce1d818ee9120165a624617afc937b2293051fcc","sha256":"67c88852e700b642c26d8731b8e703f84b4882fd2c50d9535cc50598eea7a98d","sha512":"3f5334d2aa484fa8e92eae37806dbe54d8958eac0aadf817e7ce0bcdf0074d2c28cc40b08bd4ffecd3af8372fab4f84ae918792aa9bef541351e65cbd569d0f4","ssdeep":"","tlshash":"c421c618b161a093f2ba8a54a481a285bc23e3b99736ceadc074a4a497fdd84903204b","first_seen":"2026-04-22T09:20:42.886983Z","last_seen":"2026-04-22T09:22:36.161194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/owl.theme.default.min.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/owl.theme.default.min.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 376\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AH4bZ6gOMfrf7u1I6%2BXW7fEoUqRbHAHGVnGEiBFSrBXGEyG02k4gvq6vZY%2BOmTbqZsOmc1ySsOwweSeb8dpRxka%2BCnt7JJSdjiPMlgF4O1n2by8wMNUnZU8bHZNCEPb7M6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d197cbc56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846), with CRLF line terminators","md5":"884f2375d217bd05c67fcd80f393cb9e","sha1":"827e2d9574330c1c7eec6a5c093bb7fcc956ed27","sha256":"505fff817f37d43899275853aa6d6f4f3644b6abe2c420ad9cd6caab1ef147cb","sha512":"03ae3396a3363e9454f6a6ea099f9ecadc6b7e1e7881ce7bc3034e53994402e2f168af2b63c312361efd6f654bd9cfddbbecfade2873da8b2b7b7e16d20d8685","ssdeep":"","tlshash":"1511abc5b189221d3023c58046a842cb6b1e687e529d1af5f8ee9120c32dd053a6f7f9","first_seen":"2023-04-06T17:34:28Z","last_seen":"2026-05-01T12:49:46.130556Z","times_seen":3767,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/ZaSmRnVUP9qE6zs8t3KhaPhWz0HMZf.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/ZaSmRnVUP9qE6zs8t3KhaPhWz0HMZf.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:31:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1186\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGDjCr6f%2FORBZWTqu4dAotV3RXVj%2Fynej4cKvgKPCTn1tQc86XNW38iHDsLdQFlKJo%2BLILMmV7fpZchO86U89lMThE1%2BnBGIYTLHqAc7DH6ZrKy7MU7b2%2F5vhJnmtpAkyqw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d205d4b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae8e67688de368a4718ac58463335f5c","sha1":"909790167a9a692060ac6e6334472623b0978ddf","sha256":"55f140a114fab545e619177ab00caade93b12fbe48725b42484ca5c07e97c325","sha512":"73e5e2c8d979567ad4ce8ebb8f535bddd6953686d2d28e592b8d923e2b80a4ee2c9e19a030cd266ddfedb58f9ba6bdd7a9470e37cc053c75b7c919258b57809c","ssdeep":"","tlshash":"3b21d7b66b3a1ed79568bf79ebcc39b8f81232490239774228840513078665c9f77acd","first_seen":"2026-04-22T09:20:42.88835Z","last_seen":"2026-04-22T09:22:36.158274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/z5LyZndkMlxsmTYN15l86HgUvK8dGi.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/z5LyZndkMlxsmTYN15l86HgUvK8dGi.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1094\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=amgwo88vYQDmAibFmZ2LTyhyC2VqEagVLYvi5jtFDy7lT1cSN35lbhIGEy6AekC3lj9xHLrQ7x8XT0jRQy31Runtaf%2BuZPFIqPYeXia3qb%2FGJTG6OV2e9eZItYI6tu5bekM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d206d4f56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2753452ce2828aac78cb49f6853ccd61","sha1":"435779e7160667a198cf510139d6a17208064408","sha256":"5d87a2e5e83e8d8b1255b51ad136580902da78d98bc6b4feca2ecabf9d3818f7","sha512":"714df1dcad579a34145342054a7d7cf41876814cf19fbabafbcbe2e2d850bf9f7d39161d529f6a696cb0653c626924cc2887b1b399e0f8b894528440fbcc5241","ssdeep":"","tlshash":"7111b972a363e8c89994b9713073bf10c21d5079ef84efdadc1240b26bc54c6c591d23","first_seen":"2026-04-22T09:20:42.889175Z","last_seen":"2026-04-22T09:22:36.0782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/dsFwgbhcmn03zuqBtmbz2eRAs1JVov.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/dsFwgbhcmn03zuqBtmbz2eRAs1JVov.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:28:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1254\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2F%2FzrSCMGLmOCCeSOPJs7g5xegsmHbkHkZNWEQAVAuIcC3Hf3MaHDYC2s%2B7Yz7G0Inmh10bW1e%2BBToCpCmS8GMfLby9C0absW4ndHYuVBCD9vgklKugTX7oQiJwiqpB1s%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d207d5656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32dc056cf4e025f39000bf085e4ed050","sha1":"697e55f93f2cfe6704d16108f26012823478d612","sha256":"112bba579b328b7a981170d0c47a90fb3d50e579f9dcdc3853918e47b6aa6ec1","sha512":"5b2035b749216dae869eb8719cfb86e01a36415ef1bda1494041133d5e96b0a9b0358e56c393c9f984111e0e1ede7b2bca4d0094f0909c7fa023dc43649ba486","ssdeep":"","tlshash":"c12117dba71ac36adc75dadc0b8d3e90334a9ab98115f34b20cbaba044c424418a3e0d","first_seen":"2026-04-22T09:20:42.889878Z","last_seen":"2026-04-22T09:22:36.159691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/slick-theme.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/slick-theme.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 742\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lo%2BB8bt1C0lKb0mk5Exuv99qnX%2F7X42GME5kw%2FLt2%2BbkUK37WYrdwxd0XP8IO%2BGinM9icj6kIpAUBkjbKcMIWpUzMXdJKbxsqedv4RWcGusOPMfVxGAWQM0YILcGPt6bIbg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d198cbe56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3245,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"51c992e64595403c6ad516f6156cbe92","sha1":"6dd9865ffc347da5951a023b3111ef1d65198697","sha256":"1fcea7f5e592c32f02c762f55405537c0daef3de1185da2e068972c746bb430a","sha512":"2fd8182965f3a171eca2d69c7f8c767b72793957741968051b2b8eb17d86e10f7974d66878a86107c3e617e0b7f8284eba00956634aa6b5aef2cc82629e6a949","ssdeep":"","tlshash":"59618ed89256e1d2563398803f930758fbc770531a210eacfba553894fbe0a86bc5b9d","first_seen":"2025-05-05T11:12:30.40873Z","last_seen":"2026-04-22T22:46:38.715334Z","times_seen":13,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/txoonHEEC5WqjBZJlpnKGznUM2AfdP.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/txoonHEEC5WqjBZJlpnKGznUM2AfdP.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 13:55:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1670\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SuiWN10DtAymTLG463lHgmn3hXvCkCs1r5%2Fttuf04NDGIGtnbdGLYkQNyWJUU33LdjBfG8P2WWw%2Bv%2FF18RTHxubK%2FOjqM5TS9N5GOQ1LO4Xw9yvHXARi%2BMBNMl6sdB4Alg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d207d5356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3b5eb43f03dceccd4a3e7c261342c54","sha1":"cd32d5189459dd4a61a73234597d238e93f7ff3f","sha256":"9f378e76309e5100a2dab3499f8e621fdafc14204cff07d53b77c232b09d9fe8","sha512":"480bc7b89395c89a9a35e2bbef47a505174685714764564ee4851e75b36d076fc0dfabb47a57ded059f11636bdc55537a6e371ff33a6d05d4bdc220218e4e40f","ssdeep":"","tlshash":"e031f812331c39838dd1da3ad7dbd70443b417f9edac7b7a16d52830b7a634842159ea","first_seen":"2026-04-22T09:20:42.891315Z","last_seen":"2026-04-22T09:22:36.079623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/logo/KuGfI18RZbT3akuxjHZmK0R7F5sz3h.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/logo/KuGfI18RZbT3akuxjHZmK0R7F5sz3h.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 31 Mar 2026 22:57:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3570\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEVpPJMvS4XyQ1ghsKL%2BLnf6hh%2BUaCAqb86sGbBukDJ%2Bn1gsNmyXpDlF3tc%2FhDYi%2BMOv%2F2LJeautS1PuHcK%2BV3Cq5XaMog9OnF6VmSywjINONi67zpd%2FenSfnlSRp8mK2%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cc356c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6abbd33b80e8952efb0c37a81c265dbd","sha1":"3d88c6927c550af6f03a531aff4ed8a7be927728","sha256":"432ae7d9d74af3fd50ca734c78449088fcbbcfea4c025b7ece095dec14b492ac","sha512":"73fa591cf2de862d0b68880003dd798d935300207f15e2b9af909cbdb26c97f1c369459abf2457932b007ef95b7e727f25b6766c089df0341ad6785f21fb7629","ssdeep":"","tlshash":"b9716c7fa6eb8ec0fc4110b9845f2be6507e8c5f007a4d57f4462a1e461c26e1d68c9a","first_seen":"2026-04-22T09:20:42.892162Z","last_seen":"2026-04-22T09:22:36.113489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/bootstrap.min.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/bootstrap.min.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24642\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSMXULfzMF0kVsfS76%2BfbEIc1%2BCq2g1RARPWdQ83DfoMeSiZKKvYNcT7dIYC2TT%2FgjY5GVD0Q4%2Fn1yVdeA%2FVCkSt6KZuhYP63d9EXRReNjaYvOh9sGDhaRcyWjqBF%2BvrZRU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d197cba56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":194907,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300), with CRLF line terminators","md5":"7cccebd297829600c878f0c6b45ff7ec","sha1":"23b14ee7d38f64aac342f05edf0c0b06291b4070","sha256":"63b089b699b098830fef1e23c18e2413393d0715b5ce2a5f4823753ac2739e8d","sha512":"cef570cb050670abcc10b9407f7df28ac6333b57ffdbea79f8cfd84f83fc02b9f449f2bd2e88f085053a48e352fddfedede3961437058401f10ef263bca7c5ca","ssdeep":"1536:1tGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4l8:1tGg9JfWD9kVkpz600I4l8","tlshash":"331482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-05-22T18:47:47Z","last_seen":"2026-04-30T12:58:47.674328Z","times_seen":52,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/select2.min.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/select2.min.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1949\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkxIF2%2BRgdUAbF2eBJ8fS%2BicRJyc3pS7r6rSuE%2FbI0vvGOwoZVTzMa7lzG2AXoyH7D3K4oDGOB0KDnvinMS5LENs1DOIwSxstVxZZI4OIWNt4PzXx9hNrOJNUnskfqMJ1Ag%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d198cbf56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16265,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16263), with CRLF line terminators","md5":"bb4f601b18b642bda193fb02d8845d94","sha1":"dd955de114f23a39b7ce95f62c56b77aed15f7ed","sha256":"4a7641c6c583062a068c15438922a6ab5087da847d51d18b36929b013f106671","sha512":"e9be22785e1fe87e33b3fc557656c0c0985687ddcd080c303c8935464f65be56c77ec211d6e792a57c6f4653b5e6a510d06ee6f075a16e34497f645062066e09","ssdeep":"192:1EaNSrenTfc3aq6J5wV1Q9CPxWqAUJKk3BcH9t3E:1keTfXnS1Q9sWqbxRcdpE","tlshash":"ef72d935bacc2239b0bf8e7f6cf2b4946629dd5fc4111b9ab8e9e154c8e04540a4b60f","first_seen":"2023-04-27T00:33:01Z","last_seen":"2026-05-01T20:22:52.474847Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/contents/img-2.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/contents/img-2.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 19 Nov 2024 12:26:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1718\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAvv5Z27KK5iquAYfuoE2KZWBT0sKtPcrNTmO85QcatbBRkOIFw7sqRURuHIN71Gm%2FBBhnwa33PMtLrVwDLdrCeDb5e013d7Y1HjnFVOinMfavmF3pP%2F4%2BpvtLn0SdCJdgI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cc656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 359 x 433, 8-bit/color RGBA, non-interlaced","md5":"f242e653eeed65b2369e60429906b21a","sha1":"060365f82da5c73746143a41e4afe0e2d021af10","sha256":"0aacedbca2b3190daecbb7fc1039b6708196950813442ce47f60ff0d964659cb","sha512":"eef46a5f9563627b3bb691fa3eb6304ee0995f9eb4b29591ce3802f0b2e475b5b03bc619c2e859356cc58f3d07a7b26d0b60cb0d1957fa5671169ef85d67954a","ssdeep":"","tlshash":"cd31dfc46fb356f5c50e0f4dac1672005c3aaa5a20070328a6a4130126c7d030b2e671","first_seen":"2025-05-05T11:12:30.41982Z","last_seen":"2026-04-22T09:22:36.115503Z","times_seen":5,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/select2.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/select2.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19377\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YD07bEg3YgMJ057UW%2FZfEQ0YSdZMPvoQxAuzm6woe6JSuJX3iiIGoF0hV4l%2FWfmU%2B3A5fSKnaXT17A9cOZQN43uRKXfcnYHLdy6eW44LKbiFzwaKeaRoFfCIy4BO1%2BLMB4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":83309,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64126), with CRLF line terminators","md5":"6261aaed8d3c438b7cd60241462bb6b2","sha1":"c61d3ddf3aca8c24d0cbc10458d5a2177d2e62a7","sha256":"6bb9759501fa8c53c40288058344ca38b1e8aec830575aa543b63bd0afcd61f8","sha512":"d3f2a632763d292ee4ef426bc4b9f85484023a936f52d59381c8396eb077efe9d317f7097c2b696d1dc1db14502b8a48c805b17a0c4c6357c6d656a0c355c235","ssdeep":"1536:0ZoMrztEsa7loyQYTdqQ3RdOpbCo73pcdOIRb8EMc5g3PywNaQec5AY7:0mWEh2yQYTdXnOpbf73pcUIRb8EMcq3x","tlshash":"28838515f3e33b37825f70e26c9f9c4c7234593c51865948661cc9e8987c828a7beead","first_seen":"2024-10-04T10:44:16.250189Z","last_seen":"2026-04-30T13:07:51.73896Z","times_seen":49,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shapechange.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 17:38:59 GMT\r\nexpires: Sun, 18 Apr 2027 17:38:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315673\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-05-01T18:12:21.057165Z","times_seen":6174,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":172,"dns":1,"connect":7,"send":0,"wait":9,"receive":2,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/webfonts/fa-solid-900.woff2","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/assets/themes/light/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 173208\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5RYFI7wZjP0%2F%2FvV%2BB7uFVCXbk4Gco4JoIaFn52TSVeYp2t%2FfEcjJDl%2Fgrh1LS0559HRHgvDsJsN6uEVEZeuTaGfR9rzCqwGwJePkTRUErveUVwHz%2BjIOsvcdrJLq0VL%2FCA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d1cfd0756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173208,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 173208, version 393.14155","md5":"c3bbb1cbf69d25aba9edc32427e6127a","sha1":"c8ef3c3be9723cf1ad975578bc65ddd04ed2fcaa","sha256":"5950d2f39fd635e5c97054053cc92e0f79c233353989f49454a03c32f897ba5a","sha512":"7178d84a72a10f3bd99efbbb270d3f2be9845447e44575bf926370ce10e99be2e840549d090e2f89e562cd7ee37267d169b33707a9d4f0dc44f982143859fa37","ssdeep":"3072:S6rqJfbvuAEjNPcnTgJsvsXh/MXb1DKLZdFeYbT6WeeR9OIkIbl:S6rqJbufRcnTUXh/Y1ebFeYbT6AcAl","tlshash":"d804235eb5062015b88607c37b37dee7c57b21de4da626b343e9c5c8b323d9042b98a7","first_seen":"2023-05-21T23:20:59Z","last_seen":"2026-05-01T03:18:06.17246Z","times_seen":435,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/logo/ES7dCmSp8WHcdVbDCySZU9JXVhkMOH.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/logo/ES7dCmSp8WHcdVbDCySZU9JXVhkMOH.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 17 Nov 2024 13:27:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 484\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YkVixbno7AQo3rjatgU5DqRzrf3jq%2FX1MKJSVc1FcPSAUO0OcHOpIW2U21cN34vsMn5b2Zwv4YH3agsk2eSuq3WYdNFpLCIDWOvBduZcEKL0cPglQ9NUfDOwv0jWUpqe3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f038d1f5d3856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ff8f1f236b0752d09b15f3afdb0a0ad","sha1":"5046086bbc05c8aac55ee88302e3c4b5f12a513a","sha256":"63088125eb616950b9993affe1f8e32583308e835c54896d96d6709e49355f75","sha512":"5706dada7dcb65703a4d23ad9bb7dc126632f33d4aab0a5cbcc0ac7968b17ada534ca6e0795b2b344b82b15e0a790c2958e100694a810ffab702fc6c9575a4c4","ssdeep":"","tlshash":"12f05cf5276b2232c03caeb2bfa8023b43f89c17f0c5880423f88c6911817b9cac4900","first_seen":"2025-05-05T11:12:30.365896Z","last_seen":"2026-04-22T09:22:36.109908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/H2Z25aRsyc2xRck6JpUSszy2JtgVC8.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/H2Z25aRsyc2xRck6JpUSszy2JtgVC8.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 02:27:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 948\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ffx1ynFDkZ8vhP8JEJt6YU8WDWwgOwLT3lKSmBf3cX7FLkjiGUMYjjMd1eVGlqwrS1U4NEvOfOHU14cO9ULeUYWG8s8UgImROmcAhYHZQVhTOvzvNEL358nSr4ZpLQN58ck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d1ffd3f56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cae4e88a1883843dbd641ede8c1f28b2","sha1":"be8d5b3b1efb923268a5173e01e4858d11e3b4ce","sha256":"7ba1845e74a66439aefb3e1430290e29df24683914d08f2201370bc7ae59958f","sha512":"15edeae08aa3b99b3a1f463ca7a2c009b9046b18df61325c489d3fc91c40b5dff48df3da8fb5735e37fb457f3da353c47ecd2cb24118326a193340fac4c0096e","ssdeep":"","tlshash":"0511548060c7d4c35689533174cf61cf4616050ec29b5b1edcb51b1324e59690c7ac7e","first_seen":"2026-04-22T09:20:42.897329Z","last_seen":"2026-04-22T09:22:36.110646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/VgVS1yhSuY919YOS9wK0arMt8y1XZJ.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/VgVS1yhSuY919YOS9wK0arMt8y1XZJ.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 30 Mar 2026 15:37:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 698\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4jEK3K7T4K%2FfY58LrJeddQKYHGkyhz1VJC7em8W3dBtS4g98kc8w%2B8i8isse%2FMh993Rz04XnBWyjV38gp1OWdi6gSvOZooPnpFrz94JHIJkpfrVBLWPWAnH4uBCw2ZmbII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d202d4156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43dd2d914fe4528284f32927ed03bba9","sha1":"962d34a6e770b2be26b2906ea1c6d0bae3de6ad4","sha256":"6ab3a2e6ca2e8ef309154e9d0e16b79f5b1024cfc47f05c8edcee624de20d8b5","sha512":"bbb0c11d16027e398f0aebe65f628581db6f5fbc1106845d7c8e7647c966ace2d10a46f2f69401d0a06dc917aa76ca21d3618ddb094f372043d8c0da99941b5e","ssdeep":"","tlshash":"5a01940c7c17dc6081659e30a876db427ac986b980a88aa0aa5709a4cdc4952a35473e","first_seen":"2026-04-22T09:20:42.898132Z","last_seen":"2026-04-22T09:22:36.088124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/dqa8Huswtah3EJFIgrwTApoGkCeOjz.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/dqa8Huswtah3EJFIgrwTApoGkCeOjz.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:22:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1202\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2XxaH6D6Pj8pHwzY0mzBROPHIKRNnRQWs5KWMFmV1AUBqRntC1SMN7%2BQESBTaRm96ti7YwIEfMpD4HEvo8rH%2BinX9bwKfaEnxRd2%2FiLHe1OZ5q03dNnkiGnwMcaycygMlw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d206d4d56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e75bcb1c9c8f471649e73d75ccdfb6de","sha1":"056a400f0dfe41220148e16a9283cf0da304c4a0","sha256":"3752e9613feaa9bbc791b234c93e9dd74887284eec37d7d4b5397f4093c90d6e","sha512":"74da354f0c869e9c09d014b0965eadc24dc31c1f3fb4204fb3978101f3887dd23f477e9c5cfec3c28e6c5ac00f2d4d2076627daed6b587a189f433c1e493f861","ssdeep":"","tlshash":"cf21c69a7b4d0b12e00bbceb0a3b0b197461c995da23e801a5cb0a618d53c95969f93c","first_seen":"2026-04-22T09:20:42.898883Z","last_seen":"2026-04-22T09:22:36.12058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/jquery-3.6.1.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/jquery-3.6.1.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30318\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdw6Sp9Zu0BNzjuiinUnl0Ka%2FncqM8CHkJgGkNkfzQLyID0%2F1ExJOBcIiiDfLih2wUlgyQJuqTYqTKPB4lH%2BpIxeRLkGhGkoGwQJKauXpzKyuC8bhTv72m5PMOEI5nVhjYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd156c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":89666,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"8f1950538c6051b90dae76087bc65424","sha1":"f88af5a8061ad3170d0a7155636e798797ef9656","sha256":"24c7030c50c1045cfefddac2d403f4bb2043b34183f6887f5c88a3e12e0236f9","sha512":"dc52b97ac0efccd9bce32718d84a8573153688329455405411d52fc0b5d3dbbaaf9e038b57921bad43115d151994123948739b329ab4713d0e60b26a67efcf85","ssdeep":"1536:RjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvv:RdeIygP3fulzcsz8jlvaDioQ47GKK","tlshash":"9593f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-09T23:12:28Z","last_seen":"2026-05-01T07:58:27.391535Z","times_seen":674,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/owl.carousel.min.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/owl.carousel.min.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 917\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BkFBPTjZrMBT%2F75Hlx8oFtdtRs8UHJekd9ZHmDvBf8jW7CMbZeIaormopMgE43Hl5tiYWA23YNd5isiyX0mGIgpen7a0FstMc7NcoE3yAe7tzeYp%2BDXCJldgllGKiwrDDXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d197cbb56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184), with CRLF line terminators","md5":"b9755c9c2613c455154caf065bd1a94d","sha1":"aa3c316b4e2ab55bcb3d8e3d186677739b0cfd64","sha256":"062368677bcefd9495e8b320e0cf22c4faca9f1bc04666efeb9cd5307cd591a4","sha512":"dc35560a766631f3b508d0e280fb95f746d9940b48565487932ea6c1ac97f5436d0ecf3b59ebc2ba2c4f21f7c5b963b4671a7f3e56745860cd1244d207fbcc6a","ssdeep":"","tlshash":"a361cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T17:13:40Z","last_seen":"2026-05-01T18:08:25.803694Z","times_seen":5608,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/nouislider.min.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/nouislider.min.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1039\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVZ42nvSkVbkkoa%2BCzwaWf7FN31wN9mdKlBKZKqHs0ivKMjLUcWCekQ5fMtKRPC0o65Qt1Ih6CxgEI0auJpCyPDLUyWqbhiKrNUstHTqWx45GmFsFYWeoMsKD2k6bUI%2BvMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d198cc056c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4220,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4220), with no line terminators","md5":"9c515dc535774a0419afaab68e10afe9","sha1":"33aad322ddcf94d0ea07b56b18db27a8ef25ffff","sha256":"9dc9155cfd6331d1f5629881ac0bc63928243fa4c1d83b17ce4921b5200be0ae","sha512":"aaf78a9c6aef38285b4b301db52b3ca7af5ea0b7a0ca1fb587038c6e6a425622308fbae7e2826376632f58ebb24254ce6604e5640d0dd8f5c0ee203cff64d460","ssdeep":"48:NSpK7cvHCjzgog6H2o3VG/WOCef9/e6/vdcq+ieHFVvrMklrLo9u9lS:N5cPo3QuEF/e6/lcp/HvvrVw9wc","tlshash":"b591fd3208322f399226811c87e00ff97248c21f83733adeb714b623ba57d9d159e689","first_seen":"2023-04-11T03:18:12Z","last_seen":"2026-05-01T19:37:31.536576Z","times_seen":4445,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/logo/0ucJa4Yz58c6I8uMwaNOvXlGATTG14.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/logo/0ucJa4Yz58c6I8uMwaNOvXlGATTG14.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 11:19:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2830\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8sKhT3z1XL5rK9cwX6aBHsxy2RTLw76%2FKVmstVN%2B3dSjIxpEqOM9tFHh9wCCLSqiusERRfLVQwapONJQoJMpaiMMaC%2FOkrzjp8WygL0FTIgy1bIYAd%2BB%2F9pnlB4uVnK5sg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d199ccf56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2830,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55bc229c007bb126e7eacd3f15b35c23","sha1":"a95b5edb166d52ba72fde9b8c743197caa37d358","sha256":"05a30fb9ef1af0b514342a0528cb0bc4da0ceb79ff2842b3fdeb4dd613b920bf","sha512":"0ec0a5e784767571be178ba80b81a8f3f5cd4eebd530d052d4349f6cfd16ae37d20db26d22f5a5e6836b9f321883fe8d547313feca074f827f9ac926a5d7dc39","ssdeep":"","tlshash":"87515c064bfa200fe659420d864b71ae13b49797ae7c15c7b1fd03d2b40d259a070a3c","first_seen":"2026-04-22T09:20:42.90155Z","last_seen":"2026-04-22T09:22:36.107391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/fhmA5jDPg718r6hVCpOTXhdR19JUZZ.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/fhmA5jDPg718r6hVCpOTXhdR19JUZZ.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:53:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2598\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kc%2FNiB9pzJa6Hu6acx3bErby%2B%2FVadnw0OldmDaIZgaxsYRahdpRJjWo8yQ5lQ6s9u9ndRrilId05GOKsMPFcLkw5wOdAppmgva16laO6FLJxJjQcQbOpxgGuSqux%2BbtlVEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d205d4956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2598,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01daa5495ea0cef5103fa7fd4745443c","sha1":"cd0a8eac98a8432dca45c100d2ead84ae27c20a2","sha256":"9acec918974a38d6867e14fd64e5a570c22de87a11103c1fc54b7898ba1293f1","sha512":"616b24f6971286354c17901ab7a68fdbbffc9aebb823ef303c42c338fe967cb46089c7fc70dcb2e65a075cbd736e14e0afae5785252f2464981431378bce10c9","ssdeep":"","tlshash":"31514d4f577a8a656006410efc4fa91afe430bbc7fc3aa468d7b59706ccc0980f21496","first_seen":"2026-04-22T09:20:42.902324Z","last_seen":"2026-04-22T09:22:36.16716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/img/background/bg.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/img/background/bg.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 783980\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwfH7XjNbEitBQIS7WCWJOO6zeikObhH4coBAIdnQhbMzKFV0jhHraKLsd%2FiS87wDstvmGNXdPOJesWgD0V1T4m9tHj%2F8Z2C8InMz6UqK6wXCDkjrsshiOnQhSAcb%2BN3MJk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d1c9cfa56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":783980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 850, 8-bit/color RGBA, non-interlaced","md5":"eb1757976c189fb08b6e3f557105df25","sha1":"a867d55c7e86b0f44d9cc30800ce4f56ba5e8398","sha256":"2a47400c3f3420945dc473ca66fd38c9eb5dea5fa436f03189961cc6e4799403","sha512":"c20eba744d1512b3ff1ebb8ab07fc7e175f9fa206946ec9c72a1f5f59b0388f9cf464d1c14943055e172be7258e1b7dd678874aad99198353e9a14e3d6d737cd","ssdeep":"12288:ISmI3EDYqgS+95jDTf48anzjwgp5M9LZsxQsA1az+xrV+XtwNqk:ISV3EDYqgS+9dX48IjrQsxQsA1mk+XtS","tlshash":"aef423d63aaa4d28d1fbfd31fa4e993d40f7384305b36e9d86ea810863d25d356d9c02","first_seen":"2025-05-05T11:12:30.386656Z","last_seen":"2026-04-22T09:22:36.104008Z","times_seen":7,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/bootstrap.bundle.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22493\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FisiKgt39SS0pdgXtzmMPyDnQnFe21h9UEKjwYN28bHRic8vgjsS65F15CqI9RufSlEZXTQyLS3EpsH0oi9ArOKDFfqUYqcOFGuPiYZJEKHb7pb9vt3fr8e5d8DH2dmP0Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd356c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":80502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"dc757df9e9699ab0a588ec67a711b75a","sha1":"bb4d5c07ede00143624addae0736aa3a55d879ec","sha256":"17f1006a38edde3e8b1d4444596e3b990ec9fc6f27f4362f8426de051443e07c","sha512":"9f1ada7d84ba2075ce202691e19bf1312380b64fa99ce58f2b3b2304e1ed5996ca89fdec7f2488b84b7d74c01b380dddbeeaad30026bd66fc10d83d028e45cee","ssdeep":"1536:azlMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CjcI4BqQM6k+:Y4Fj8GPwRM3CAI4BtB","tlshash":"7f73c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","first_seen":"2023-03-08T14:35:31Z","last_seen":"2026-05-01T15:36:36.830617Z","times_seen":98,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/webfonts/fa-regular-400.woff2","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/assets/themes/light/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 203900\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MiDhboh8AsnF72ZXhj2ykcvHuULkhhjRYeMdGi51zVh2BEaff1seQ3CtwxSsrJqa%2F5QmjJGZEX9sq3OCWDWpBCgkd4sng%2BRVggPP%2F0y23%2Fs42f%2BSyscmG3Rab%2BxFKyPErrk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d1ced0456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":203900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 203900, version 393.14155","md5":"e81b9be2e169ee5a1c4e55d0e8df1038","sha1":"e50fd62b111e7ed9d15c24d5bd360c58f71f40b5","sha256":"5a220cca1dd85aed4ca1ba81e1daedd4f4d5364d47ce852c4718d9da9aef9df7","sha512":"a806ae266ccd4ac35f00e5f612bdae7dcec937e3a02d20d6b60235744ba709182470688c4f3932e7fe79dff7a60c3bdc07955ee3422c5a8f0f694876201d2be7","ssdeep":"6144:hULA6j0FlOhQJPXaJQ8MG8jwS+C6NhGqNhcNHOwSwB:x6j0FlLJPq+8b8jwpPzNC9","tlshash":"ba1412546c833bca9da3504551bdb2c1ee27a08964acc6842005e7cfd7fd931bba3a77","first_seen":"2023-05-21T23:20:59Z","last_seen":"2026-05-01T03:18:06.157392Z","times_seen":182,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/ufvG2epuoUSFmHyMgrkjuaehA1jnTC.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/ufvG2epuoUSFmHyMgrkjuaehA1jnTC.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:17:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1810\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbIEfQBv3eLG0uscn%2By5ETb3ZS44uRytg8dzNo%2FNdurl0RyA2ogbiYOp0XFN5lMXUnVBoEF9bZdUlUQRFw2vZGSnD2Ugl9aLP%2B4BRn9UxoACa3InQSfjt%2FOxgbiDWT8uONY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d208d5756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3eca97389c9af7b3d849d1f90ce241eb","sha1":"9e4e3d132ad9c2e67785b75a0234ac039392ee73","sha256":"d19a3718fd75424208079cee0e837e35e02206fdeb26bb174045de15a112d189","sha512":"ca8b0764159a1fe78995a3b286e6b109a503b263870a7763f52d006640556300e8666e1a81a7ff446b28c4a99a460d6e338fa8c0344f7015613637ab08e5b879","ssdeep":"","tlshash":"8131e95d1342e5b90407fb70ee7dc184db6a227908e4bed583119cd126e521a7deb706","first_seen":"2026-04-22T09:20:42.904691Z","last_seen":"2026-04-22T09:22:36.081568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/pQTqxFEK2wugzrszSP6X7fsW9uGwOO.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/pQTqxFEK2wugzrszSP6X7fsW9uGwOO.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:33:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2002\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W13Meb4wRpAD20E%2BszdRcELbIUYLn5RPRrJzsMxh8bHOxsQvD%2FGdNrUB6my5CbQeaHwL6nbIf%2BafVCRPcQUrtsTUHyiSjH7EtyoNXqubA%2FqceqeRTsYdP3GafE4C%2BjBbu4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d208d5c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca9932860a3407d358acf57ea262f5f8","sha1":"6a2006ae4a059f45283f2981ba37534594c98926","sha256":"8ed6936991bb2e81f265560d5497d5bc7deef847dec8766d27894a71e731485a","sha512":"e126edfc792a0e7b0d9fcd731a6c9cb704bf7f0d43bf9ad37313f32d2764f384e7dec8405632aafadfbe6d7668a61f8428058ddad8f3a5b8f7ce8f0aeb388470","ssdeep":"","tlshash":"5b41e8022498e9d1a667d1635d747793e09aa4707f221635ca898d9a85090a4de50b58","first_seen":"2026-04-22T09:20:42.905475Z","last_seen":"2026-04-22T09:22:36.171659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/img/accordion/minus.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/img/accordion/minus.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/assets/themes/light/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 399\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwz1S8MR833%2FGNEQ2KUbQ8lBfhcA17vMA09Z3Fm93bM10gAoMyl%2B10pQYHEyL%2Bk%2F%2Fw7OZLAUXJt%2B1csbsis6ZWoIVhp3s0d1GxRVDsEROYeX8YWx0afVPW47D9u7%2B5S4iAU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d1cacfc56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 16-bit gray+alpha, non-interlaced","md5":"9b4f2cb9a7ff5f5c8521fb04454d7e8e","sha1":"d4603de7feb891cc09814df790df951a984d2be3","sha256":"21d3095547d3b6d0a874bc7880246d6fdae822c8ed89129818b0acdc368541a8","sha512":"801eb1e5b0f92889679ec456e3a79dbe360b508f6a4680df45853cdcb57e3346f8fd00a264b979be43bad85aa6c45b9ab5c3530bc95c776968fa9e8a9b7647b5","ssdeep":"","tlshash":"ede061c1d1f5da7dc60b3b46031a1981fca2060f0da30635f579d7198928fda2afdb81","first_seen":"2025-05-05T11:12:30.403964Z","last_seen":"2026-04-22T09:22:36.175119Z","times_seen":12,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/img/coin/coin-2.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/img/coin/coin-2.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34661\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aq4K6R9HzYgltJNx8KzW2A7AO%2F%2FbEOJDl8sXpWzFsQ4qIE8qssZIb3UaEf9yCSwsu67oudIRgDGf2aurR7B3DqA4h77Z5kySLmyXRlvdZ4kvwH1wTJpBZmI788fYxHH%2By60%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cc256c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34661,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 174 x 278, 8-bit/color RGBA, non-interlaced","md5":"b6a10731d3f1e5001282512927998784","sha1":"6795f4a91880ac24158ff30c6f4bccb758042e29","sha256":"19318e54ea23b7356ac9796d2f79d31c75d17c817939656a84996fed44e6b731","sha512":"e87e53a65a390310fa25d893bdbcf48e1c6ca71be683163e6a47815a52f65a116b93188bde03c9a91e21d536c30fdc947296fca345824ad026ef8766e653264f","ssdeep":"768:KZF7C//2CJ5n1xSp7KuyIrBNFINLMtMVjYixmJksuEp53Kvj+UALKelYB:MC//2u5UJyoBYpMtyjYeCubvxAGMYB","tlshash":"a8f2f18c524fb704a6dbd0ca1c409479b2605eea76884337d1ef35daddf13498a79f28","first_seen":"2025-05-05T11:12:30.43596Z","last_seen":"2026-04-22T09:22:36.121688Z","times_seen":10,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/contents/work-process-img.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/contents/work-process-img.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Nov 2024 05:58:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 184704\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AchETu9Rjo1tCDO7O8uo5zaJw5hWMDamYUH8JFSjlwpq0AvWrLIWZnru31c2TBW2WVOxFcoe5ghSbH46LUUqFOQ1T7pHhVK9%2F0h4nuUDcFD9c1WK5vieXfjq8xNNaD7a7CI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198ccb56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":184704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 623 x 505, 8-bit/color RGBA, non-interlaced","md5":"2836fde94c97ff4ddd4c060782c0ad03","sha1":"41651584cbf8b521c87283fe1af26a29d7399d14","sha256":"c6a34babeac8e37252793bc58f3ac5a5d8f0ba3e571f27d2f8ddb27c611a7401","sha512":"ca0a7f9d39af27a1ed1da8dc990f4fad4c0678e6b88cbecd59f98ed44143917185a4b64ed66fba35484533d0696ed5bf1a880d19e5b274c57c2592e8dbd12ad0","ssdeep":"3072:LDEWJXLCV5kILiWkGNBHdXYzUmwx1bgQkUvtfKFTetHt2ED4UUnfEKKZF2Ue1lOO:nNQ5kYdkGbGz/wDCUvtfKFCQLUUnfEKL","tlshash":"0d04120b12645c06f8c007a99541442ef96debf4bbd996f08f17a405e8e77e1fae0b4e","first_seen":"2025-05-05T11:12:30.410171Z","last_seen":"2026-04-22T09:22:36.134849Z","times_seen":8,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/owl.carousel.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/owl.carousel.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11143\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z06mqPmKc9DmT2oeGgUX4hlr1tjuVWPUkOEplnBywzjBwZFjTHE9m3FUBFA0jhHbjbnmEqfqmXiCzUQK0oiNH2JS2F1LJNa%2BrqmirgCDJUWbqFc9MbONXazZ%2FFZUMm5%2Fs6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44348,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-05-01T18:38:34.504673Z","times_seen":10294,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/slick.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/slick.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10093\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cuZnbMYPBDhsPzZtw1JTVwMlu3QZpBivDuJWBBLoCta%2F3T8peGoMhG4lrgdGv6mJFB27HzceSX8lb8aiEGjLU9CzwdlkinaiFk%2FP%2F%2Bwk3WKFTYWcRCOX%2FWhF05u6oSf26ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42864,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862), with CRLF line terminators","md5":"777da4aaf5b960636dec0fd4e50ba489","sha1":"9a94038ccae90e6d2a0f9cb61f79ae7c70320287","sha256":"e1a52c0a06fa9f65e015b02e7ec463fd621211a9d2ae44b6660597900e927fbb","sha512":"9b810776ff98b94fe765b192187064d2ce4921fb60baf4c797c3302d332f7e55556e54eb070cc8917f61aa74191539a294457aa18d54f5e85527652695c6f848","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYK:EPrYdlNixEePiYK","tlshash":"6213a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:24Z","last_seen":"2026-05-01T19:42:39.19419Z","times_seen":12549,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/B0RbePJ8UQkqiD3OBXkXQioHEVsgCv.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/B0RbePJ8UQkqiD3OBXkXQioHEVsgCv.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:20:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1080\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNT3u%2B6eK9YOp%2BBeW5RrrYV4myEqJeCAzNOnki3jvCwHqLprso7XKdX%2BVEH8IouDaqWszH9bFG72O7TeVIlSHq%2B0eg%2BGIuXym1V8vPaMfo1a7LdihhqczEQJ6%2Fxu8J%2B8iq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d205d4a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83c6a4094546c44c2885891dea58827b","sha1":"788fcd2673ba110f7cbb75ee9e0a2734685b0b87","sha256":"0f10988054a05c2ac6a42b124ecba65fe48ff54cdb183544b80c4a2d716873fe","sha512":"c603ce82c8c30922ac2344a50d3313eac0f58c1285b671e8679e52727fa82a5b4186ca5083a993b9c46d795d87cc0026d7bd5ace3b2fb0bc7c19e1b4bc7e1879","ssdeep":"","tlshash":"8911b9a5d7b00e85dde3adecd052fd6e260abd2747fe020908a922226d965925e0cd74","first_seen":"2026-04-22T09:20:42.909003Z","last_seen":"2026-04-22T09:22:36.111652Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/mM1ij6VKBo4oLohGC0Hf0F83lWU90R.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/mM1ij6VKBo4oLohGC0Hf0F83lWU90R.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:46:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1712\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKYluEZ2MEWWwv14yBLfDWAsa7TTA%2FNuC%2Bpxs6H1zJGCY3GKnS%2FWc%2BhRhiBPtYbV7lWMJiZh%2FEnh%2BAKa9OpHoSObu5LkSZ6C7lx6e0cinRKI1JCgnI53yKUIWhdYiVN9DOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d205d4c56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c12e3a1c94f6c7003c4a4c7e140cfc6","sha1":"d5554e02c51f7db45983845291569383a9dda124","sha256":"95f74788468aef8564e63f04635ceca351f5ff0c811f0d00ae76d055ed6966e2","sha512":"7f819c9746fa24990ccd126a089128c7973df036b37dbd07a87d4523c7c475b883cec53023347b463921ca54c6e4dd26df8e7e62f83b7ac9c987737d876f377e","ssdeep":"","tlshash":"13311d9764c88c75700209f2f3706e679087121fed937858199721e7ba008b4a115717","first_seen":"2026-04-22T09:20:42.910171Z","last_seen":"2026-04-22T09:22:36.119458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/d0pSRVKBaf0bbUGA7UaTnrbfUXQSLu.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/d0pSRVKBaf0bbUGA7UaTnrbfUXQSLu.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:32:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2034\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFp8%2Bse4V%2FyiGnSHxaUNAr05I4oVE5VebH0dO0rHiqvY2i1mNorMzSnLmhnWmBJQj0fGmImCZJG4XA0CIQWR05Pew6w%2BD9YjHtFA7w9i5DyV53ub1R5QM9sY6qiQ7JptrsY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d208d5b56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2de47757e7a45986037bdb1cc0aa266f","sha1":"75097e4f652bdc37980a2df06e493289232a51a2","sha256":"052d2f83215b91e99db992b04854eee63c1411fd3a4370348368218d71466cbd","sha512":"d83a9a5e2dd8e1b30c5c33009db880cabbacb5b2c1fe3b7ef30d7831fb539c752c94d22aeb75f0e92aa18794727421aa1d03d77cec5a597a2238a38530e7df5e","ssdeep":"","tlshash":"61414e8058dd9cf5e8b81fc7b6a8534bfdca70125512c952965604ec14dc134337dc6d","first_seen":"2026-04-22T09:20:42.910834Z","last_seen":"2026-04-22T09:22:36.17589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/coinAnnounce/NTphKPkY1d2OUnpL4wHi2UWc0K8sDg.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/coinAnnounce/NTphKPkY1d2OUnpL4wHi2UWc0K8sDg.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4300\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGhcl9jk0Tn6nUzb0csI42KM%2FL9emjynLHBHuS6HfBEW2ESp8xofX3dX%2BEKu8wZfBdeHadmvNLah%2Fg9zncmLN9MTPOxTgG%2BrTiQ8kL16k8qMKEegykN1Q9vzGcpu%2Fl1Gp5k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cc556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"663af2a93dbc99bbc4c6c767aaf20efc","sha1":"95044439f5f4300200915e1f89b48e6e11b0c215","sha256":"e0390873ded76ba1821075d1cadb6c59dfdebbf1b6a3f15c0858442d7d314bbc","sha512":"ec3ef4c98c44c18268dde880c484b94099920b57d81fd4c8b7a1956f04b3490cda005a1c192fdda38710ab3db6f29abfbb23c8765f570e4e7a559e4fc6ed029d","ssdeep":"96:jWnF9gv+qXGnLwCORD4DiGXqiSkhDS54ISx3SghT6zfs:SaH2LpORD4DRqiSkhDN5x3nTcs","tlshash":"af915d554a18d9c6047f76e9cb281bc63c8cdeb58b4196ff06f187151b807ea2911ac3","first_seen":"2025-05-05T11:12:30.373819Z","last_seen":"2026-04-22T09:22:36.127503Z","times_seen":7,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/js/nouislider.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/js/nouislider.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8901\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2TdYoBTMniAwcIWhfEDixIfDd1q0kSn0Wl0NoRWGSEpNWIrypi4UueACcSK%2Fz40JVaXRINg4aT%2BeCDRlC9tCt1V4Brc7bR6WC%2FE%2BZuABgSCZU9G2yMvEGRJNqa6R6wT5xQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d199cd956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":27118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27118), with no line terminators","md5":"1c81c26999ceb485d4f9204b6ac2e83b","sha1":"472923517f13c3037e48935ef87e000920d78aee","sha256":"995d5e01bd25ecc38eab3aa72df6ebcabdc6959b693ea1a4901c2a18ca6e36a6","sha512":"50e25ee29695ea16160674b473d1a72111fc3cb9b69c52b6dae85f02fb1322a777bb09d6b15ae2d4e3e7e5f25874bb46637c01d752c61c9e323d4d5614978161","ssdeep":"768:iE4Zj4wv5Uyweawt2LBtke6swBxT0tN8bUHKKO0qSLeZW7jgSz63k0qm1GVfUPJD:Hrwv5wzjg/U622","tlshash":"08c20880b25438360a633071902fe60ea1337750b94a89b5e675d5d23c78e6c5affe7d","first_seen":"2023-04-05T01:40:37Z","last_seen":"2026-05-01T19:37:31.535481Z","times_seen":1169,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shapechange.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 17:38:59 GMT\r\nexpires: Sun, 18 Apr 2027 17:38:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315673\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-05-01T18:12:21.057165Z","times_seen":6174,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":39,"dns":2,"connect":13,"send":0,"wait":17,"receive":4,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/style.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/style.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Apr 2026 14:56:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15529\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pv%2ByR8%2FnsIZO323oBOulEfoLv0MbUSL5YzbUreeClJajLYaX3dO%2BYqrKuA2Jr89PdMw7kjICgDha4iYtkNupPQPxNUW54aLKS9k5kUa8hTXsBsUqsBJJC7jfQYpaks5OOIU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d198cc156c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"30cec89da03bd3235cb3070a9c4afdeb","sha1":"0e0ce8d078d669434818eda84d8a06db04ea02c3","sha256":"3d8a81b86d18b0f013dc55d28a1e8e8eca7564c9d1c443ce540bc36de9ed957d","sha512":"8e245bf0d08d199640a6a8566f817d16312d7a7a1b670835fbb5ec24fbe936188065428290adcc1994ed8b5f269dfef677aac6699f5de8756ff715163a4347d2","ssdeep":"768:10yzIPHWM0KXI6DxKRFG/mTXfx/pW9W4OhDl:10FP2M0KXI6DxKRFG/0Xfx/ppDl","tlshash":"aab37148ed1221672237eb786bf54659fb9450638f0206a97bed21494ff42bc026efcd","first_seen":"2026-04-22T09:20:42.912531Z","last_seen":"2026-04-22T09:22:36.172981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/contents/question-mark.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/contents/question-mark.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 20 Nov 2024 10:12:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5325\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8okxX%2BweAM6ztitg9V2Yb2i%2Funm0XLDz6Or7i%2BQDvyCYP%2Bz6odLbN5Ov7TkZ4n%2F%2F77i2L74vIMvcuf1JhCMDAGimRikciOsMRk%2FMBoaBzburK%2FkJbZqJp3pVe5Xagp4xWRA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d199cce56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"203a0328c604765d69974e836ee81134","sha1":"adcfbc3b159ea3a0bd4b749dc8cd19efb319abcd","sha256":"2e399df2981eac8c733c42f4e4e5edea259dbb9b403447455fe57f502d6162ae","sha512":"b88eac8d90e5196cf78bcc61588dce3975da521889d5962f750d39df7d490c233784219720ad67a0434a731f03344340261f06706bea8cf59097b8617aedea49","ssdeep":"96:YPWtNPzoOQaNc2EIIHXMqK88q9QM1L6BOU6etKFtZBbN0G0LyIcPZgivmkE2V/Yh:ky45X53MoqM1L8F6etKFtZBbuG0y3Rgf","tlshash":"fcb18dc35580650aadad72d13da41288dece40ab00ad26d7c1f0b2d52abb8ed569d62f","first_seen":"2025-05-05T11:12:30.432633Z","last_seen":"2026-04-22T09:22:36.068943Z","times_seen":7,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/get-exchange/currency","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /get-exchange/currency HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-XSRF-TOKEN: eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0=\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: PHP/8.2.29\r\ncache-control: no-cache, private\r\ncontent-type: application/json\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; expires=Wed, 22 Apr 2026 11:20:12 GMT; Max-Age=7200; path=/; secure; samesite=lax\ncoinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D; expires=Wed, 22 Apr 2026 11:20:12 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 2819\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6e3YmbFMqCFwS9jpCUck3LFi3eJkhYIF2GUml5RuruovvOLSrj2gQ9eJG5H%2BfbEvuFau0SK06OoswdhsqdK3l0DAY8jwDohp74wsuud6GAlfTeEwvDGjW6esn7Ouy6WsHTA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f038d1e1d2756c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"59d03cc5d0078d888cf6b02c9b66447d","sha1":"214e8a0cc28b9736f9b8ead789a33125f2e1ba2f","sha256":"e4d1caec1279d8969240b4c4f7ec94f364566f4b4e1dc080284780b041802090","sha512":"f422ee7c6c04293be0965e4ecf0b3f081b0191141de863bf2a9a521d683bd22affac4dd8239eb4b21d79d3aa90582aa3add149fefbdb6f8d043d71af9028c83e","ssdeep":"384:aVkN553rs8D3l3v3TkfVY+feqDLV/YXAoFl6zkMLyLhnAq5CgkdKR8zpzt2qAoYy:HfjRnJCn3fjRnJCnY","tlshash":"b2f2008b36a5fc7dd7749c921b6b79642a4d310ea4cfded977f8c96840ca632080de21","first_seen":"2026-04-22T09:20:42.914382Z","last_seen":"2026-04-22T09:22:36.085934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/themes/light/css/all.min.css","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/themes/light/css/all.min.css HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 17 Nov 2024 06:31:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 60190\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bo0lACjNDe1OP%2B9MCgMm%2FLJMOiVjIV7Ej%2BtlV6nurPQxOrOGyjk4yKAcz4xBXH9e7Xqq%2FPFbRV2xriv9QEhiwCL9%2FTpgXtRbbyQNDrauZ0bwnFXq6OwIj7cQ0VjJTGidubk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f038d197cb956c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":385844,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65383), with CRLF line terminators","md5":"4c99f74bd5f39f8aaf380c17075ce9f4","sha1":"9d68f26e8509e63f674796c7678426765d7c09d4","sha256":"be037a5e7a704c7dad870a9e7606566e72fbed7a90fc0544476b7ffa44645c34","sha512":"d86ca2121d7b3cbac2b20bf3176f5f7adcde48138c676235bf0cd708a6e42c83fdca2a9edb8c7f59917675647f712d3ce8d4871c854bd7863c4fe1cf26a2910f","ssdeep":"3072:fWd/pGlqoxqFAk2CkUSHICE6PJq0+YHz/RjyQU:Od/pnoxqFAarx6PJRHz/s","tlshash":"d98475a0a01d11dd7397e60f5b02b639e4b3f33ed9814a4fd1c6494e0dd3aa871867ea","first_seen":"2024-08-31T08:27:27.860596Z","last_seen":"2026-04-26T07:56:23.774673Z","times_seen":20,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/contents/star.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/contents/star.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 19 Nov 2024 12:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2264\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ebOAf5k9pe4odCFn61BIN83Gbyx3DNpp4nJHjPsqSedSNESfjvN0wrhMYMTOzG4xSBpTB6ZR9Vkmy7%2FBvuWoz2W%2Bz54KbE3zRYvcoZ5t2iNd1k9ISUWFCrf53GwGWYhCpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d198cc856c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 82, 8-bit/color RGBA, non-interlaced","md5":"98f88095a803f6f9b1cb416762fa48d6","sha1":"69a09489fc301a0a341ba46c959366eeae97715a","sha256":"4706ec9133ebd286e321330ee9615cb4198aaf32d77362ad5a0021498294bbc8","sha512":"4fbd3cd1b5f104cd543f3b1ff7620034f7135bcec93bb228dbbc1352e81a58778f768f96cb68104e5ac83900c7f8ad57ed2b11cc3b9ed032e3d49066962f4876","ssdeep":"","tlshash":"e74117eb1094b99a5b8928adb3db9ea97afdb8fd50853d0010e094589c73c148a3d3c9","first_seen":"2025-05-05T11:12:30.421418Z","last_seen":"2026-04-22T09:22:36.099666Z","times_seen":5,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/contents/faqimgnew.png","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/contents/faqimgnew.png HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Apr 2026 12:35:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 763028\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nxnWLWjw1IndoGSyKhWZG2rgXwgpINzzWIj6bz3TUxY1d6Yhs4tyvz5JTyYDePuZJh3A0sQqt7%2BJRHyQ9xV8OZTya4ZPPoxiapSGRQJR4e0UhABrfF200UpVtwEDMu5dek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d199ccd56c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":763028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 847, 8-bit/color RGBA, non-interlaced","md5":"686a0fcbbe7f2046a2e6063156a24bab","sha1":"5226df7cf3c4afb03a2c9bbf38dbd5e02d862639","sha256":"b1f963f8d7e879ef345a8f8ca0930bd74c970df4830fb56497d024d5103f3226","sha512":"419db456c468266714ac49b107f506694f5aeaa8bb021f77d241ae6568c1e073be4f7a2031a176e02c68238313ba3f1f02e2854ef51aa71f811a078741159111","ssdeep":"12288:t42axbOF+VvoAD3+AASfIQ2SKPAIFf3oy4+Jv/YaQ+LgSnkiygkL929pvV6NG:t49xbsMok3TqvS0jfhBJXieJ+kvuG","tlshash":"20f42393edf902f2c683adb5715e9183b63a1694e344368f4ff0c4895303b454c65eae","first_seen":"2026-04-22T09:20:42.917089Z","last_seen":"2026-04-22T09:22:36.124312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:11.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVDVFg4VlhSaW9Tblp0dG5xQU1YdFE9PSIsInZhbHVlIjoiWXVzOWJTWDR1Z2pURzFNK1dLT0JIbWZuRHREQlEwWmsxTTVpK0xDeVNURzJKcFZWUGNjNzlJeTFuNWNDeE1zaHRac1dqc1huTStuek41NVUwKys2OHRXOCszY0dqQVZWRTlIUTI0V2JBODJTa2EzWktQOVRhQlpOUFlQT2RmbmsiLCJtYWMiOiJjMDI0YzUzMzRlZjkyYjA0ZmNjZGMwMjc0ZmI1NGY3OWQxZmNmMmUxZTI4MjJmMzYyODViMDAyOGQwYzI3MWE5IiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6IlZBT2w5YjV4N0piNEtDb1YvWEdhUmc9PSIsInZhbHVlIjoiNUVZOGsxaW9UN1IvbHRyQ0hKaitKR0YzcGRGMVJwZUQvMGJYbWh6czJvUDZINkN2eWM2bnA1MnZ1em9Kc1pWNHUxYnZqeCtEY29DeW9tM0tpMEEzMkJLOENuUU9xRnF2elU0QmpBckhWVzlNWmVNelZnU2x1NkRDRkhkZHVvSkoiLCJtYWMiOiI4NGJhZWUxZTVmNjlkMDZmYjBjZjQ2Yjc0ZjQ2ODRmMWQxM2QwYmUzZWIzNDUxMzM1MTI0YjUzMDk4ZTgzZjI2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 22 Apr 2026 10:08:11 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgF9%2F%2Fdv8Mwry71cKpgc8%2F%2Fy6bdJdUCwH4R8Yh17%2FEfAF1vNekTwUJT0pucEliffP97Z7DGUpGph1l8d1JUiBvMnjhp6LrVERfDzYZMoNa6bgL3ImlhN6p0SJwKKNji5n5Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 22 Apr 2026 09:20:11 GMT\r\ncf-ray: 9f038d199cd056c7-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-01T19:38:43.282488Z","times_seen":320506,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shapechange.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 17:38:59 GMT\r\nexpires: Sun, 18 Apr 2027 17:38:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315673\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-05-01T18:12:21.057165Z","times_seen":6174,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":53,"dns":1,"connect":20,"send":0,"wait":20,"receive":3,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/IwNuqjIhNjOZXmWlus8yAZ1ZPneU3s.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/IwNuqjIhNjOZXmWlus8yAZ1ZPneU3s.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:12:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1052\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjsiDf5CgGsKjot14JQk8%2BKzUdTZQ%2FCl8YtpUEX9LRoFeEYeIXFWs5MQqcyEidlCS73qSjvQt7OZDKY7AOwfAcI%2FasmZJSwlyGoJIWSLuBzh%2BcbbO7Jt1rIaBMWb5TaJux8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d203d4456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa66251c777b479a6ef5b54546ac22e9","sha1":"c99bfe9aeabf2d1c74e9199feabf6019b90642f6","sha256":"656ce8e89b59ca55e78c11b176f6cd0f52824eb25f60fb00342e1a20ac4c7f08","sha512":"0e91b55f70fad6637f33d7b48671a82992f0cac773e8717cca4a6087ec00d0c66aaab6ba16ffa44ad0b5ba563fc1661aa42e406c1411e4f56ac1d4d73a444f9b","ssdeep":"","tlshash":"bb11d88e823838af7145de06351eac84e341f4067c26b4670601bdac8c0d878b56a0e3","first_seen":"2026-04-22T09:20:42.918583Z","last_seen":"2026-04-22T09:22:36.072198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/dork4fgfn3vVd8tIWbZHHUREM9f0lA.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/dork4fgfn3vVd8tIWbZHHUREM9f0lA.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 10:48:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 836\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3J3IGkqawEAvp6WSCZwDno90zNLCt6yKSfscBgPLqqMiMvFMA2fv%2F%2Fa26jeM2HxzTjI32apBsaSyjWtMR497%2BPkPM5pS2R4igkUE7W%2FAzmk0ovd6mT%2FVrw2sUg3axRNXSGY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d203d4356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b511cb8be3db35e9a57689bcb331b8aa","sha1":"a55a5f65d15a94705b7880120efb78565f9c33e7","sha256":"796f2ae03e7a4133534421ced24deb5a43c081544e80c3795ee32b2eda75c802","sha512":"1a564ead01e87a46a1bf11f4c3bd728eb63a5ed9022182698936d3a9807455588b749b32198a8dfbc3c1d10b1b73174af65a39bbe0cb10ec2b3e1133e2bfca4e","ssdeep":"","tlshash":"230152c9fdd162cd200dc129ecf9d152468728270f9c62318ed269a8f019e1db97a59b","first_seen":"2026-04-22T09:20:42.919385Z","last_seen":"2026-04-22T09:22:36.09419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/fHWSslbFQEWeySXB7z3fGzruncHLFT.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/fHWSslbFQEWeySXB7z3fGzruncHLFT.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:25:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 578\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvOzufQ80cLfi1lheO3dTZuAb0JWHqBxa9iWkRm1Vz54V9bCmvoTtIJSEBq3md3d74RXaD89KJMvJjVxHpbX86TEuB13kR0meN4o47TALtgKbh7EM2%2FT8l5VTBqeyjI5YnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d204d4656c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":578,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"02a6f99e2b9bb6458791a0df4b97e921","sha1":"cccd356e5c8c5c22924512853eced0d029797f54","sha256":"9da5e01b817d020cb58b4451275f52bbcbe449c65c5a31ec17853bda5474fd83","sha512":"76b9aa7a06c4c5a280095bb840025c3cef58b9ad858f107e6f51dc6381b1b4889f60ad1936db0c60173c6d3d886ad75f7aef8975e22a718468cf970b7bb1c7fd","ssdeep":"","tlshash":"e1f096bac1a91d2505181a500d911b342e1ccf40d53390159b616d1b89c22ff31fdf40","first_seen":"2026-04-22T09:20:42.9202Z","last_seen":"2026-04-22T09:22:36.156713Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/VS6JJyW1ymqQVPCCTUULixhVOpCIef.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/VS6JJyW1ymqQVPCCTUULixhVOpCIef.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:26:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1092\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMVhoIQMjdkl14MuzvCna5P6ayYO0N28ns9ZS1Fvg8qV4cfz0Fja%2BR3CyBaqLGfASxYrDriDgYM61px%2BzvxiOK2Sbh5gxxhkAQyaUepi%2FJDsH6CX%2BgCMsZ3xZ7IlMTyKSZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d206d4e56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48465d226a6f49ca7bb6c888617d56b9","sha1":"9a0c8b401d5095e87914aac6b1b6a8e360c133dd","sha256":"05c5fdfbd3efb2e830d75571a7e892edcb4e81eaf54e2d2e82386e3eb5ed0c78","sha512":"4f7a41b9c000e8d43cb8beeba0060bfa6deadf5e570f115e4292a01e3f678537e289ee46ffc0f5e73e994b2b82483839339761fdf1424c538d225374c70ee801","ssdeep":"","tlshash":"8b11b97f8f98c5758e572fb7710b93811367f6705b6c21090c68035e97ab172c29dac9","first_seen":"2026-04-22T09:20:42.921008Z","last_seen":"2026-04-22T09:22:36.074274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/cp5lWyanmesvHPq6RXx8PFWtGjWEeU.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/cp5lWyanmesvHPq6RXx8PFWtGjWEeU.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 13:59:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1806\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfD2lc1FB%2Bql5S10HTeldPZjddb%2F5yona4iNLYC4qUr7FjYenieQ6oxc6EJFz2rqUGBbkTzAWLBCeMEoQJu5vi0bmW%2BeoRzgtTIAtD2Onm9UuYTTipdyWpkfSfFl57fOCCA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d206d5156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78397b81f57fe7811a46d8f5ed8ee2ac","sha1":"d76392260726c87dbd312ea287a4d36278330868","sha256":"ba1185f454636d5756758a3cec4f9f58b68b3cfb47588cf1859324114e1b1915","sha512":"4363801ba409a7b40d96448f2c6b4a5586a35947f4be229d4caf5399bd90b720d36bdb4602f175a82faa3b396488243832291881af6b4373d986657b8541b6bf","ssdeep":"","tlshash":"6a31096c0ee92c16ee8bad95706abf4fe674e6d8813a9ec81001e0761014cacf59241f","first_seen":"2026-04-22T09:20:42.921714Z","last_seen":"2026-04-22T09:22:36.168884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/5OKsCWjO7vQVLHh4sPCYCZI9kDcyGl.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/5OKsCWjO7vQVLHh4sPCYCZI9kDcyGl.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Apr 2026 01:41:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1026\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rETmTXJO4DxHFXHW3E3dIrfal%2FDOaxvhi%2FoTKf4IRCkm6AWjZc5J%2Ff7K9NAI%2BcxUNg1JtG65u%2FIoOX%2FuQV%2BlDytDgU%2BcgrnmV02%2Bhi6sOhwbpnvyel5%2BWOGV%2FJ19%2BpGJEn0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d207d5556c7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"750271d8e938cdb178600fe203a66007","sha1":"9549107223fe65957bd20778dc1f3b10c0c943b6","sha256":"34d96f9b608a68fa9a85de02c6bae2b5e143bf15e71b86e5982b7e620d3816b9","sha512":"4eeba0c0a58370099aa1d22a67dd6209193f728c758c7a65087744da133f6a39d0789628c2fb37041a06b31dda3abf204f7138f8a8a772ab920c31575a01c5db","ssdeep":"","tlshash":"b311d88bdd6b9ad84c0d6d716151c74000271e8613480e8526dce84e4b96b173234c77","first_seen":"2026-04-22T09:20:42.922544Z","last_seen":"2026-04-22T09:22:36.178344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shapechange.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 17:38:59 GMT\r\nexpires: Sun, 18 Apr 2027 17:38:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 315673\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-05-01T18:12:21.057165Z","times_seen":6174,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":60,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shapechange.xyz/assets/upload/cryptoCurrency/vGMZbprSbZUhecj6FzoqenSukNeWN5.webp","fqdn":"shapechange.xyz","domain":"shapechange.xyz","tld":"xyz"},"ip":{"addr":"172.67.146.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shapechange.xyz/","date":"2026-04-22T09:20:12.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shapechange.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 12:43:20 GMT","end":"Fri, 26 Jun 2026 12:43:19 GMT"},"fingerprint":{"sha1":"15:83:C0:B8:68:DE:0C:B4:74:1D:9A:95:C7:5B:70:94:CD:B2:08:19","sha256":"FC:4A:60:AA:A2:7D:4B:81:2E:C8:54:D4:5D:C3:33:D4:95:F5:75:BE:E4:BF:1B:5F:03:E4:3A:D8:CA:DC:08:3D"}}},"request":{"raw":"GET /assets/upload/cryptoCurrency/vGMZbprSbZUhecj6FzoqenSukNeWN5.webp HTTP/1.1\r\nHost: shapechange.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shapechange.xyz/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZzcVA2V1ZUN0lFZkswdUpBQjZ3Q3c9PSIsInZhbHVlIjoiK2UvTzVuTGd5WFg3VHFqMy9XS3ZCamd3bW9yQUVRZHVUc1pLbnpBMjBnc2RlZG5neGd3K2lwSXcyU1BSUWNLMWtuWGQxWlNramhnaGN1S0oyOHRFSklucGFuWHQrenQwZ0wvOG9xMml4R0FYc0RGNDd1QWw0TWN0ejBGUzJ5Z1EiLCJtYWMiOiIwM2Y3NDJhNzY1ZjBlYmMzMGEyMGJjMDdiMGEwMTZiZDZkN2JiZjBlMmIzZWIzNDZlZjgyZDllYWQ3NzFhN2FlIiwidGFnIjoiIn0%3D; coinectra_session=eyJpdiI6ImJkYy82VWl4STBJZzMzYTdVdDJENlE9PSIsInZhbHVlIjoicGVnMkdueFJyaXVjWEtCWTRTSjVnMUpqNkVaczlIZVkxTEhoVFBwM0xybEtDZXRIUDA4Zk9mekR6QVlmZ21JcEtUUlZ1d0JkbHJKLzVBK1A4elZNdSs0WDVicjlFc1VTcXdQM3I0bysvRjZ4bjJJaVh5bHJLcHJjVW5lTVVJNlgiLCJtYWMiOiJlMTg0NWYwYTRjMDBkNmRhYWIyMDlhNzcwOTM3NWIwNjNhODQwNTRiODRlOGVlZGFlNDQ1NmUwMjhmYmFkMDllIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Apr 2026 09:20:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 01 Apr 2026 23:30:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2118\r\ndate: Wed, 22 Apr 2026 09:20:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iqsC0d7PfAvsYyNJ5Jem5TQE%2FBngQ9ENIpP%2B9penXorvohDIt3vZC9iAX2MwHsO6V40Jmbnb69a%2Bb41UQZEN9zvmqw3IVS%2BMvynBLTe3cLQ2HpIS0wCPrGNbVwJRa4tJ7H0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f038d208d5856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1fe5891bdc6537c99569c9121a4dbb3","sha1":"6228ecaa5982f4837b75983bd01daa6e474cb70f","sha256":"31de682a41bd2b28b140a38b3269cd89f5cfb3dc6e70ddc98a3d66016b0cec98","sha512":"d72cf8a1f30b506b7c1c10c7e0f18bf3b4d130e6aaf51610ccd1a77f219c673d388364c1c2a787144e7b012c90a2d2e7eb4a6aec4dcec82a2b245d953a2e388b","ssdeep":"","tlshash":"c4413c11d159cc28daa1bf5c9760a7732b0ce66cb17a4b31023c2e6a19c201db0e63fd","first_seen":"2026-04-22T09:20:42.923251Z","last_seen":"2026-04-22T09:22:36.170345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}