{"report_id":"bea3e384-882e-4893-87bd-9aeb4d61183d","version":6,"status":"done","tags":[],"date":"2026-03-26T22:11:21Z","url":{"schema":"https","addr":"keine-exchange.biz/","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":0,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"keine-exchange.biz/","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"title":"Обменный пункт электронных валют","dom":{"size":253858,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63959)","md5":"5044f3245ad8234b19ea50daecbc6792","sha1":"62f183494ddb5bdcc222beb23a6e2c586d06ba2c","sha256":"ab66fd8989333f0977e7f048f1ec0d73b88330b5fdcadfa7b4eaf4079e20ed3d","sha512":"9e2da4f4921c8998584ca0256afff1ca4a3f0b0eb8d1acfc6da68c4b729e6e6637a3643adee0d2d6d76e22fc4764ed08cfd9ed421ffec11537ed3b9d7dee5b1e","ssdeep":"3072:K8VRhWUmoRmyGINZP/mdwAO2+T1EQFC0VpZc5F61VHsTTpTHpoVb9g1ur90gU8GV:K8jhWIHNb90ur90gU8Gy7lfdU+DAJ04","tlshash":"9e44e6f0569969f74203bbd0e620a71a35ab82adef034944c3fc1f89a7e6c5ccd15d86","dom_hash":"domhash8d1969958d355691b528f72af0f65889","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"keine-exchange.biz/","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":0,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T22:11:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"keine-exchange.biz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":73,"request_count":73,"received_data":3620303,"sent_data":33940,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"keine-exchange.com","ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":1358835,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":10,"received_data":324686,"sent_data":5030,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":24742,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"keine-exchange.biz/assets/index-CTX_t7eL.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"77c51e5e029e09b0777825226f9d62d9","sha1":"328703fd63ce6819f21f66bd8a293d0f13d86f21","sha256":"0f5bc8e91fe24b9497c4c1b44a1934fe5b1737dd01425a8471056425605e946d","sha512":"4e003424bb476c4b07532f64e2961d10ddae652da4549eabfb238526f5fdf0c626d0c54449354387f84d351292770e0d7f06103d88704208d37bfca3aa8c596a","ssdeep":"24576:q1lV2xhvNWGZvY62W68C1HAjVj8JNV0guLOKWOI14ip2MnyAjbk91yUobXWoMUGJ:q1lMxhvNWGZw62W68C1HAjVj8JNV0guF","tlshash":"e235f850e299b6efd922a5c5d91e6408306f0efdef6e445192bc7c6931f0068732bbc9","size":1108313,"data":"","first_seen":"2025-12-01T12:23:30.578237Z","last_seen":"2026-03-26T22:58:47.55195Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/site7f0f.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cf54f948b975fefdf2f3a7777fff567","sha1":"122514bb9cde7f5379a56767ebd82e236df6a90e","sha256":"da22b87172e673e669d8bb39b18b679d738c487672a5e5f39f65a4ee63b30482","sha512":"8820be457cc280fbfaf8c48333db091043716ceac2c83f0011fb8dc9c29387c418f58a277488ca88627af129c70051d943cb6ce6d3e45115b63879c103e84cbb","ssdeep":"","tlshash":"885102927978762dd1ff309da17f0150ee2ad0129d022c58e8ba55a46ee0b0a77d3c2e","size":2963,"data":"","first_seen":"2025-12-01T12:23:30.539624Z","last_seen":"2026-03-26T22:58:47.543556Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/keine62ea.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9af5639a387b3bf619000b7cdf832f8","sha1":"128fde67438fde5828359c48aff8f8dc39234515","sha256":"90c02b917e4fb40932e85f97b74f490e7b49d5a8bad36697a7174d15c690eb56","sha512":"162dd8269f56903e92bb02aabd3cd4e95ac8a78cede18abf859abe6babaf05e47974395fa46a2eee602a683a9f71589d03eb4cb5247e369ab36961b3c65618d0","ssdeep":"192:uw5U/y8QVGtYnp2R/yBq51xyACRhEDoQyA5KNix2GYiNcyLFJuz7:tr+koU","tlshash":"edf1ae23b32532e3217be201add5b761533909e6f81b98d1c6b2590e2da48d7753fc2e","size":7843,"data":"","first_seen":"2025-12-01T12:23:30.549738Z","last_seen":"2026-03-26T22:58:47.520511Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/keine62ea.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9af5639a387b3bf619000b7cdf832f8","sha1":"128fde67438fde5828359c48aff8f8dc39234515","sha256":"90c02b917e4fb40932e85f97b74f490e7b49d5a8bad36697a7174d15c690eb56","sha512":"162dd8269f56903e92bb02aabd3cd4e95ac8a78cede18abf859abe6babaf05e47974395fa46a2eee602a683a9f71589d03eb4cb5247e369ab36961b3c65618d0","ssdeep":"192:uw5U/y8QVGtYnp2R/yBq51xyACRhEDoQyA5KNix2GYiNcyLFJuz7:tr+koU","tlshash":"edf1ae23b32532e3217be201add5b761533909e6f81b98d1c6b2590e2da48d7753fc2e","size":7843,"data":"","first_seen":"2025-12-01T12:23:30.549738Z","last_seen":"2026-03-26T22:58:47.520511Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/site7f0f.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cf54f948b975fefdf2f3a7777fff567","sha1":"122514bb9cde7f5379a56767ebd82e236df6a90e","sha256":"da22b87172e673e669d8bb39b18b679d738c487672a5e5f39f65a4ee63b30482","sha512":"8820be457cc280fbfaf8c48333db091043716ceac2c83f0011fb8dc9c29387c418f58a277488ca88627af129c70051d943cb6ce6d3e45115b63879c103e84cbb","ssdeep":"","tlshash":"885102927978762dd1ff309da17f0150ee2ad0129d022c58e8ba55a46ee0b0a77d3c2e","size":2963,"data":"","first_seen":"2025-12-01T12:23:30.539624Z","last_seen":"2026-03-26T22:58:47.543556Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/app4963.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac6fc29a85b92bbe399ef4ec3fb46de6","sha1":"ffed7bd4a24b102b3447671b943e29228000f989","sha256":"6cfa877c8b5e249b08d4fdcd4e27552e4c9346e690d96c2c11b7af43a16de736","sha512":"e7d579c32888cca63a312ea6cb7310bdeaec386648cb883f08bfdf6a6a858e66c478393e78f9ad7d861881deffe443476286c563d1358f201f5396aa9e224c97","ssdeep":"3072:+xP5sf0Cljh6wSR/VNIeQU3yP5Wzz/AzdQBCqjQoas2kyS6MJ0j2XcQnhjpPwXxQ:+xP5dCl8T3ykzz/aQBCqjQoas2kyS6MX","tlshash":"b3046f4b5350257980b7e32aaf99c005fa664b2f52414a6b3d7c498d1f7a82843f4ffd","size":175143,"data":"","first_seen":"2025-12-01T12:23:30.571829Z","last_seen":"2026-03-26T22:58:47.538208Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/app4963.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac6fc29a85b92bbe399ef4ec3fb46de6","sha1":"ffed7bd4a24b102b3447671b943e29228000f989","sha256":"6cfa877c8b5e249b08d4fdcd4e27552e4c9346e690d96c2c11b7af43a16de736","sha512":"e7d579c32888cca63a312ea6cb7310bdeaec386648cb883f08bfdf6a6a858e66c478393e78f9ad7d861881deffe443476286c563d1358f201f5396aa9e224c97","ssdeep":"3072:+xP5sf0Cljh6wSR/VNIeQU3yP5Wzz/AzdQBCqjQoas2kyS6MJ0j2XcQnhjpPwXxQ:+xP5dCl8T3ykzz/aQBCqjQoas2kyS6MX","tlshash":"b3046f4b5350257980b7e32aaf99c005fa664b2f52414a6b3d7c498d1f7a82843f4ffd","size":175143,"data":"","first_seen":"2025-12-01T12:23:30.571829Z","last_seen":"2026-03-26T22:58:47.538208Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"keine-exchange.biz/assets/avaasadsd.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.088Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/avaasadsd.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/index-B8eC580w.css","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:58.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/index-B8eC580w.css HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:58 GMT\r\nContent-Type: text/css\r\nContent-Length: 117719\r\nLast-Modified: Wed, 28 May 2025 11:55:39 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9bb-1cbd7\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117719,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"36d9c58d5249124832c2d8231aa38533","sha1":"a32ee7e2bf9b66a263e6c21905d8f6926c723b4f","sha256":"66e6129296e9c3f02336cc4a2a7b633345273fea438f7f503c211af87ce1aa95","sha512":"e25704cb483ed8515b962077439cbbe8204341af8362e22deacc84369efeb3546f35b3231773a78cc79ccca416b182e7b7cbae3c0796a690fdc8f19b55eb5919","ssdeep":"3072:rDac58QKswa4wunn7sTQ491DksTaTo6v1RTqSDgsayMU:rDac58QKswa4wun7sTQ491DksTaT/RTF","tlshash":"03b3b8625721203ef52f9c26a6e0d65d62388413d54b5ffaf681a87cc3ce6da1237b4c","first_seen":"2025-12-01T12:23:30.561436Z","last_seen":"2026-03-26T22:58:47.522319Z","times_seen":3,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":57,"dns":1,"connect":29,"send":0,"wait":57,"receive":68,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/unbounded-medium-Dy1u9_Ld.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:58.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/unbounded-medium-Dy1u9_Ld.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/assets/index-B8eC580w.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 170969\r\nLast-Modified: Wed, 28 May 2025 11:55:23 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9ab-29bd9\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":170969,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8856)","md5":"bbd28a242e8027e961992e22f4ceae09","sha1":"39a90d6f2b21693e01dd9ae6eed266b8ad30af3c","sha256":"34d2f7c2c1d30ec6b8376d84e4f7407e0b89601e84589ffe03deca08152dc68a","sha512":"663ec5544ee311b41043535af3afac7557523dfbed86d1c1f12ee897f42f811bbc94c3629b241eec268375bf7f6dce6a5833f725cbe76b910a83339dc436dcd6","ssdeep":"1536:nGapEGHj951N0BU13QN1qoW1mAN12iA1mBQLvj4ReN1ugW1m1YQQFEZVu5ox:nZ+GHj951N0BU13DQLvjfLZg5Y","tlshash":"eaf3f7d067ec8af99846e7e5d7266024394f9cb6ea01c0a8f3fb1e4466d2c4c9d46dc3","first_seen":"2025-12-01T12:23:30.5376Z","last_seen":"2026-03-26T22:58:47.530347Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":29,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/arrow.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/icons/arrow.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 260\r\nLast-Modified: Wed, 28 May 2025 11:55:43 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9bf-104\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":260,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ec9770630e77f20fd68e137c60250cb","sha1":"803b3e70adb7a08b09531268a67c2921429071ba","sha256":"abbddbb86601dde8905bbb23b9f8bdf8f56c5d2e6a54aaeea95d18061a54f73a","sha512":"e29f82a41efcabc0a9158f7a8fe9a4910e921bc9d30c8ed6a59be00942e65878ddcb80cff2e8cf1985b38a65f5293c629da25c031147db73da33dab23145b765","ssdeep":"","tlshash":"69d02bd5113c670c99b6c075f52cb0261e5a10ede00841e0dc49635328a10816c3e534","first_seen":"2025-12-01T12:23:30.5514Z","last_seen":"2026-03-26T22:58:47.525154Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/ya-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.115Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/ya-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/calendar.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.130Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/icons/calendar.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/b696d22f-263b-48fd-8d7b-8b81a0eb1084.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/b696d22f-263b-48fd-8d7b-8b81a0eb1084.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 4731\r\nLast-Modified: Wed, 28 May 2025 11:55:50 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c6-127b\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 193 x 50, 8-bit/color RGBA, non-interlaced","md5":"74d185de79917960c310e05bc6bbf2bd","sha1":"c225f792eb1dce992cb77ab1704ae59a864d7a5a","sha256":"a78ad9e5d038961b9dc71c95f73c0bf3e244ccbbc7879751a2cc235ebc35cf5c","sha512":"762e454c7b6db6bb5a03bd82f8ab8339bf4ebbe5c5a0bde30dc60d96893d36b27f183eec6900f94af209b1b2d725080ab0f9e5e3974a6c98cf51f546e645b48c","ssdeep":"96:ncotCoCLILGM1rCNdiWeft+TGKtfENr7Be9bDmssAitLwtbX9KLfhoe:ncwLZ1VjfRKA7Be9bDms/itLqbtu","tlshash":"4da18ece773c295c114cbe1835e10953dce3ca0b5aec0141ba489d2f62297801e8b7c6","first_seen":"2025-12-01T12:23:30.530612Z","last_seen":"2026-03-26T22:58:47.531952Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":42,"dns":1,"connect":30,"send":0,"wait":30,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/okpay-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/okpay-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 6708\r\nLast-Modified: Wed, 28 May 2025 11:55:31 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9b3-1a34\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced","md5":"ab60d5959516aa32ed09326a38bdf9a9","sha1":"d2a55235bf94cd8c13cfa444ecf808884bd6294c","sha256":"f1dcebeccc2b087bc3503ba41bb61359766f2cf0a4aceef417bba4f0e05dee61","sha512":"66518984ac9e85f50cb2fa299ec0c54de0edc1844b496d2ed265acbf4a6fe7d7741f5ca32e2f21b55efeeb037177d1e5a0e7127c8c8b74ad52f6ead798e20edc","ssdeep":"192:K8UCw+ooHX6N4iXMlawVvsemgXfPyMLABPz++:xw+oIX6NgPVYcxC/","tlshash":"b5d19fecd6e634e474c492510ac04abb84e6cc6e90d6813cbb8293526f36d507cd6577","first_seen":"2023-07-05T00:24:46Z","last_seen":"2026-03-26T22:58:47.502631Z","times_seen":4,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":172,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/CcvsFrOg.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/CcvsFrOg.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 2965\r\nLast-Modified: Wed, 28 May 2025 11:55:47 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c3-b95\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced","md5":"fd89759f0b12e85c48f483dbe462abe5","sha1":"3854eaaabcb5a7abea7ad6ad50e58694a540fe05","sha256":"8f900c1755dbe669519c98549dda935e3716378c3e5cf4a679aed4910eda3a76","sha512":"248cd5f0e79d8e9014c9a8a37def72f54adf3613cb8ce23a1ce7953f74346fd3a9a91b197256285146dc8f03161f19f285d22507aec8e9dbb8204b9599df0bc3","ssdeep":"","tlshash":"905149c200b3223c2f08e2d28de64889fae6cfd5dc990082f1e5519e1cf4926e6cdf20","first_seen":"2025-12-01T12:23:30.556782Z","last_seen":"2026-03-26T22:58:47.51628Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-1.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-1.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 28 May 2025 11:55:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6836f9a9-719\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"15124bd7d322b87b16c04a30e51bc9bf","sha1":"e1bfe140b7e883cd7aafce15aead4d7cfe488573","sha256":"e52eb4c8c74d4cf3f4aec055c6ee8d0bedf01434c6a9d843da5ba5246d79e689","sha512":"e4cd9242691621be1fb3cd719f1c5752342f43dd2efddeec1dbccf66287e4a71b4f12e9bea47406ffb014866a6ce13aa9c2a5170bc00c4a9845e01e5ddcc7d40","ssdeep":"","tlshash":"a531d19365e28c1c1220923949c1fc0c8d96d1b7ef283a9c75ad109f6fd56c5c3f76a2","first_seen":"2025-12-01T12:23:30.536789Z","last_seen":"2026-03-26T22:58:47.508707Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-4.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-4.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":60,"dns":0,"connect":30,"send":0,"wait":0,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-7.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-7.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/bitcoin-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.103Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/bitcoin-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/ethereum-50x50.jpg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/ethereum-50x50.jpg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1407\r\nLast-Modified: Wed, 28 May 2025 11:55:45 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c1-57f\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 50x50, components 3","md5":"0a21965370e24719aa8eb68d48d25b13","sha1":"c783951218a26722fd670097c30e5bb6b2828971","sha256":"07bd1b9c2ed2421fdb1ce74b449d13893122970a92d2f66aef630cc22513adc9","sha512":"05a345412ee6aafd97e2bf7d97e6eb08c73c9baea27b9c9179575b75bac0a8c83336b14afa581497e4654b4fca0fe0c99e08d3938b6046e2841a07e346d97b44","ssdeep":"","tlshash":"f32195ab03522310ec2b857aba170562a3affd867511bf603da185e2c6204cc5cc8bec","first_seen":"2025-12-01T12:23:30.571057Z","last_seen":"2026-03-26T22:58:47.537583Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/unbounded-medium-2-Bub7hnv0.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/unbounded-medium-2-Bub7hnv0.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/assets/index-B8eC580w.css\r\nCookie: site-theme=light\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 28 May 2025 11:55:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6836f9ad-29bd5\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":170965,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8856)","md5":"dc50e9f4a6abedb5c9339eb43bf489cc","sha1":"e324307f6666f9c1c2907b3ea288d6590929f43a","sha256":"c08b432b92eafb0c582bf7d2ed2fe4529ced7c88e233082fd228de0261a1f282","sha512":"6a042d072c1ac1b1fd88b0a4705477be8611326077fc597a839c0067b4551915d5a9717e38748e3a955624955ab7072ec531ad0aeed7baae0a307d9e33708b29","ssdeep":"1536:nGapEGHj951N0BU13NN1qoW1mAN12iA1mRQLvj4ReN1ugW1m1YQQFVZVu5ox:nZ+GHj951N0BU13+QLvjfWZg5Y","tlshash":"e7f3f7d067ec8af99846e7e5d7266024394f9cb6ea01c0a8f3fb1e4466d2c4c9d46dc3","first_seen":"2025-12-01T12:23:30.560516Z","last_seen":"2026-03-26T22:58:47.526622Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T22:10:57.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:58 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 28 May 2025 11:55:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6836f9a9-719\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"15124bd7d322b87b16c04a30e51bc9bf","sha1":"e1bfe140b7e883cd7aafce15aead4d7cfe488573","sha256":"e52eb4c8c74d4cf3f4aec055c6ee8d0bedf01434c6a9d843da5ba5246d79e689","sha512":"e4cd9242691621be1fb3cd719f1c5752342f43dd2efddeec1dbccf66287e4a71b4f12e9bea47406ffb014866a6ce13aa9c2a5170bc00c4a9845e01e5ddcc7d40","ssdeep":"","tlshash":"a531d19365e28c1c1220923949c1fc0c8d96d1b7ef283a9c75ad109f6fd56c5c3f76a2","first_seen":"2025-12-01T12:23:30.536789Z","last_seen":"2026-03-26T22:58:47.508707Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1322,"timings":{"blocked":643,"dns":23,"connect":29,"send":0,"wait":30,"receive":0,"ssl":594},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/buttonY.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.100Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/buttonY.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/wm-botton.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.118Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/wm-botton.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/wm-botton.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/wm-botton.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 1445\r\nLast-Modified: Wed, 28 May 2025 11:55:22 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9aa-5a5\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced","md5":"519d6fde7cf841a8e6e2a54b6cbfb493","sha1":"e73eaa2e04a8ec66ab680651c5930514cf2c33ac","sha256":"ea896f5bcd65c906622ad1438a77344ad70371364642afe6cb0b78576e96cda4","sha512":"ec85a17ee0565b7b7fe4c7c71a8c31195156b7910834f6b9234667af10153b6acabbfd13eeeb0996d24e454f1b14291b3f7c208af6047e5da221dba445818751","ssdeep":"","tlshash":"75311937be420371d561138583bcb87463288b17c712e65934111538e7169984cc1ef8","first_seen":"2023-06-26T21:45:36Z","last_seen":"2026-03-31T03:50:54.841592Z","times_seen":15,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-2.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-2.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0wTzPyJWlJEI9sWD; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=4fpv4r564IHkguxVSW7r; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 21:40:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 724\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-2d4\"\r\nexpires: Fri, 27 Mar 2026 21:40:52 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adc49e0db8c37cc5c3e48dc3a7299fb3","sha1":"b85942cab861d45a0bc004e55f264e6bd647ed1b","sha256":"8d03ce9feaa2814d36ee9aacf40b24232485ce85ef39b44191f857b54f018412","sha512":"f82bd2d6bbb905344d6dad95a68412dbe3c6a6eb954703b24b78108cda13ed609279cf5f9bad354c2cc7d52920af38511266a6b3ffde61c7202115708fa5fa6a","ssdeep":"","tlshash":"0601994740fac86da83dfd2c1d74e541cb8258a32d56c14027055dc381f0d23ac77514","first_seen":"2025-12-01T12:23:30.553349Z","last_seen":"2026-03-26T22:58:47.532616Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-7.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-7.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=spSKZI7l673ffWGy; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=5ZCJEOQLtXpNzkjkZcdO; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 21:40:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1386\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-56a\"\r\nexpires: Fri, 27 Mar 2026 21:40:52 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5d809895958b5e6ea997c9e26624d45","sha1":"82622b87879e4992433e39adcf33a37bc105c18a","sha256":"6fd0af0e76dcd7901933b75fb79bd78a07cfa436cb6a4999fcb19f0885c7f8e2","sha512":"3d47f2f3b9327dc553b7a37a127b1e2439729475e9b7c7acfd0ddb9106aeaa1a8fb697615e7e63aae8c0f2058479515eea88ca733a12dfac037cfa2fd61bbce3","ssdeep":"","tlshash":"b221d84626912355edcd3a995814d11539494e44238dc29973d4f529e13adac0b548fa","first_seen":"2025-12-01T12:23:30.575352Z","last_seen":"2026-03-26T22:58:47.528954Z","times_seen":3,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/app4963.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /scripts/app4963.js HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nCookie: site-theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 175143\r\nLast-Modified: Wed, 28 May 2025 11:55:21 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9a9-2ac27\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ac6fc29a85b92bbe399ef4ec3fb46de6","sha1":"ffed7bd4a24b102b3447671b943e29228000f989","sha256":"6cfa877c8b5e249b08d4fdcd4e27552e4c9346e690d96c2c11b7af43a16de736","sha512":"e7d579c32888cca63a312ea6cb7310bdeaec386648cb883f08bfdf6a6a858e66c478393e78f9ad7d861881deffe443476286c563d1358f201f5396aa9e224c97","ssdeep":"3072:+xP5sf0Cljh6wSR/VNIeQU3yP5Wzz/AzdQBCqjQoas2kyS6MJ0j2XcQnhjpPwXxQ:+xP5dCl8T3ykzz/aQBCqjQoas2kyS6MX","tlshash":"b3046f4b5350257980b7e32aaf99c005fa664b2f52414a6b3d7c498d1f7a82843f4ffd","first_seen":"2025-12-01T12:23:30.571829Z","last_seen":"2026-03-26T22:58:47.538208Z","times_seen":3,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/11149e3094c-e981-4110-b1c3-3bd3d8fc790e.jpg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.095Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/11149e3094c-e981-4110-b1c3-3bd3d8fc790e.jpg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/lightning-small.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.129Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/icons/lightning-small.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/lightning.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.135Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/icons/lightning.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/lightning.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/icons/lightning.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 685\r\nLast-Modified: Wed, 28 May 2025 11:55:40 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9bc-2ad\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6595c3883a5165d4c2818e624db2d7a","sha1":"496d7a6f174e64975dc0c79595a15117277b5e3a","sha256":"785678bbd1f760c8ee284ceaa63cfabf84c367f602dcbf582d9aeb260c83d3bc","sha512":"5c0fda9d5e65f4cd16edcf5e6b06a2965c93ad668120efe903c51507bf800b87411500638471acd872ca202c99cedfef1f6f7e053b52a43ada3c35f073ebc850","ssdeep":"","tlshash":"1401d3b19e2d03ed988f523dcb2ce69d631eb4b4715c4c59e5fd123450836e1d92fa08","first_seen":"2025-12-01T12:23:30.570323Z","last_seen":"2026-03-26T22:58:47.517023Z","times_seen":3,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-5.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-5.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YFe54Tju2BlwRQBd; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=Q1VVJMuPpmI7L1xKZhZp; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 21:40:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-61c\"\r\nexpires: Fri, 27 Mar 2026 21:40:52 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0198fa08c4be04e626130341772c6b7","sha1":"51f49a9467a7951d1a9dc49057426e3036196fb2","sha256":"b901b07db4302f81b4af9087ab32778c2f82e5602b7d847e8f0ad7244df11e9d","sha512":"4b52261a9e25818d3a163af1a5c377bb882e8139dce9bbcc8ac67a6092c8ab3c2a267cea01ac136ae9ec7a0b37de828da0ad167c64005410e8295bfd7b7ca128","ssdeep":"","tlshash":"a5310a9ad8bd285dccc36aa2001fe332956189173111df778808041fc2364c6b0f28d5","first_seen":"2025-12-01T12:23:30.554197Z","last_seen":"2026-03-26T22:58:47.548513Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/unbounded-medium-DISMVJp-.woff2","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/unbounded-medium-DISMVJp-.woff2 HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/assets/index-B8eC580w.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 124116\r\nLast-Modified: Wed, 28 May 2025 11:55:24 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9ac-1e4d4\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 124116, version 1.0","md5":"7f98b708f005ccdb6ded19f6d3ffd31f","sha1":"c1897472ca1023fb9671047772a3a3a5c91fedf3","sha256":"f9991f9f7dbb03a0821e66f44737f8df50b1ada0b921286bb86a0e1f8f3073a6","sha512":"a74e2650da297e77ad568fdd39106e9b0177b9eb3b7a9b382f522a5d6bff5828133b02fb9d1fd2f2ddd463b098358d4ab5f45734e557f24a08c61b7aa141ecf3","ssdeep":"3072:Iyt2uw4jT4psn6mRid4vqGxNGq4DB5o9J3BOY:euw0CaRid4SGxEAf","tlshash":"42c31240b3a259bdf95a4f60b3e4c39b5a0f1166909d8469e1d358fca2304a0c7eede6","first_seen":"2025-03-07T08:05:56.243314Z","last_seen":"2026-03-26T22:58:47.544198Z","times_seen":8,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/site7f0f.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /scripts/site7f0f.js HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nCookie: site-theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2963\r\nLast-Modified: Wed, 28 May 2025 11:55:20 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9a8-b93\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2963,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7cf54f948b975fefdf2f3a7777fff567","sha1":"122514bb9cde7f5379a56767ebd82e236df6a90e","sha256":"da22b87172e673e669d8bb39b18b679d738c487672a5e5f39f65a4ee63b30482","sha512":"8820be457cc280fbfaf8c48333db091043716ceac2c83f0011fb8dc9c29387c418f58a277488ca88627af129c70051d943cb6ce6d3e45115b63879c103e84cbb","ssdeep":"","tlshash":"885102927978762dd1ff309da17f0150ee2ad0129d022c58e8ba55a46ee0b0a77d3c2e","first_seen":"2025-12-01T12:23:30.539624Z","last_seen":"2026-03-26T22:58:47.543556Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/b696d22f-263b-48fd-8d7b-8b81a0eb1084.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.086Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/b696d22f-263b-48fd-8d7b-8b81a0eb1084.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/bestchange-1.gif","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.076Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/bestchange-1.gif HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/avaasadsd.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/avaasadsd.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 4925\r\nLast-Modified: Wed, 28 May 2025 11:55:50 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c6-133d\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4925,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"943245bcc029409cf31038e9379a22ca","sha1":"0776e6f58bd173e214f947d33756a2b8c66d93fb","sha256":"965f84126ffdedad5534856861bc8655f062337cdb79bdb0a02a384e4f397e3d","sha512":"5339a46af131908c229fc4471a9963c10b4ad567e7ca23c23a896cee14c3322decb29ee7ffc5853169e3cbf9aacf92ee5c1c3302e2f63bba1c604dc50cda3758","ssdeep":"96:4DYTHN312qJ5BFubX218OOFaqUuXXP2p18htIUiHf:d3122oGiOLua8hxC","tlshash":"22a17d9de6a4368ac7c0ea0929fff80981015b8a3d258378ecc9c4160d64ef68985073","first_seen":"2025-12-01T12:23:30.555051Z","last_seen":"2026-03-26T22:58:47.523469Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/bitcoin-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/bitcoin-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 2722\r\nLast-Modified: Wed, 28 May 2025 11:55:49 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c5-aa2\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced","md5":"1eca418e44cc6176f3da20b6b2b98fb6","sha1":"1c88a9ab1e6edbddd4dcbd67619c4090711a1a89","sha256":"05359079c336e8d8c7f3490a756d0d55ea067c28fb4f510450b4859a75f29885","sha512":"7884728242d114e9e7f5c2a2ec0e15daa926efb0e9f739d8f88d0a3a01ad1e83320dd53379ab2e8a39b9cac76c54d3c7d3a9a98107018ac7e57254b4a473c92c","ssdeep":"","tlshash":"83516eff996f859dc756dddbdc4e8266681693e33661b37e0c00009a396478150a812c","first_seen":"2023-07-05T00:24:46Z","last_seen":"2026-03-26T22:58:47.515481Z","times_seen":4,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/icon/lightning-big.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/icon/lightning-big.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yvVs6KVpIiohCYiv; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=g38zZqYYYLIh8xx8UXuo; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 22:10:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 140884\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-22654\"\r\nexpires: Fri, 27 Mar 2026 22:10:57 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10fe41ef5bd99fcd6f701355625da85a","sha1":"c400006f3b0310c415df31f21048af7a256506a9","sha256":"52e555add92ec977079fe891152242e9a205b7ca45f3049fe362a6f36cf1e345","sha512":"60ad9cd5ce159109791592aa42a3ae7feda9b3409e9fac574f85628a0162f3a6401ece7f1e96de97a6280687154008844ca023262fa4927e691c4732eef7b418","ssdeep":"3072:wC8t0HZnf48F1uf00GzMmjY9CHeqr0/JgCIh62P1D2A7Kblw:18t0HVefhGz1mCL6bmXP12AWbl","tlshash":"8fd3120771879d4dde1cca7bc518e176a1ade2ab9f4a778402be44a6d305c34f13d82e","first_seen":"2025-12-01T12:23:30.563348Z","last_seen":"2026-03-26T22:58:47.536958Z","times_seen":3,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":141,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/stp-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.111Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/stp-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/ya-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/ya-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 4076\r\nLast-Modified: Wed, 28 May 2025 11:55:22 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9aa-fec\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4076,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced","md5":"a7d882105420a21d7e051cc3ff5d92fe","sha1":"6a367466326e304d4acdad5cdc09fb4930fca236","sha256":"b8c9c303cf7f016ecef7d6dc4d3d8210affe62eaa3256422378ef3b18dbae293","sha512":"a242e4e2f9ec2531b3b249cef9ebb71503c12eb3771206933cff5fa53afa3c7efd8199aac74fdb9feec5c55fe2d4cf50bc6b7cf550d428edd92e52b1c7684fb2","ssdeep":"","tlshash":"e1816d3b45775eca97c4f9b374d4d1d0b865859102615ce6d1e1c72e4a3222370ee816","first_seen":"2023-07-05T00:24:46Z","last_seen":"2026-03-26T22:58:47.525817Z","times_seen":4,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-1.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-1.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zqPGJqd21mVfSAvc; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=LGx13LtbTGr9cdLptDq2; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 21:40:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 966\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-3c6\"\r\nexpires: Fri, 27 Mar 2026 21:40:52 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af37e12a4e3ab0bd907b5b60fb11420b","sha1":"6c2fd2904afe693ff83b1532cd9da772643fe70b","sha256":"ecabcdf4d5f18483204d0789f6dbdf31452b4dc9b6687bfb63c269d1842fc6cc","sha512":"3a3e0f70b470e7ff4b1d513b26c5992396808be782fd280bacd27e7b47ff5d8ddc16847b83f43c90bdc4f4015e3a058e8afc2de4ebaaebb9b38edb4f6ea592b9","ssdeep":"","tlshash":"2111c81ccf9848d08f2d71250ff5f0cb151790b0e5c65b630ff818557632d492863440","first_seen":"2025-12-01T12:23:30.572706Z","last_seen":"2026-03-26T22:58:47.547723Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/usdttrc20.jpg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/usdttrc20.jpg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 29752\r\nLast-Modified: Wed, 28 May 2025 11:55:22 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9aa-7438\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 78x78, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], progressive, precision 8, 1280x1280, components 3","md5":"40a637cc369ec6095a1ece81095201c0","sha1":"dc5f489822fea558eea88deac3ed24b65231a24d","sha256":"7c4c7e43001d11e8f1d98ba35722105ca89bb363fd2ed663bef351b8c9772d4c","sha512":"222ba75cc9643e72565073eedf196c7409b5ea3e55f4b3f2dca688f73369ddc2c5da3e75638bf04afb971aedb3c0662e51e040057b1f5f097c3b2ba0a8ee34ca","ssdeep":"768:ClWTj7yyyyyyyyyyz3wX+aJYM3HtllllllllllwThBhIPaq5:/Tj7yyyyyyyyyyz37a2M3s/uN5","tlshash":"46d2cfe32753192ee00e4275619b4f2689afb510dfca73c97161d54cbcf32e068d6e61","first_seen":"2025-12-01T12:23:30.531431Z","last_seen":"2026-03-26T22:58:47.518446Z","times_seen":3,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/Cash-USD.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/Cash-USD.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 2713\r\nLast-Modified: Wed, 28 May 2025 11:55:47 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c3-a99\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"fdc22b1b8f43fc2f362bf9c9c4e0427f","sha1":"bc0f0f2808d7263b9992b8ebaf41a1d128e990f4","sha256":"b08010acf2b35f36789eb16268557ead0be90917d83a648eae7dd55967982245","sha512":"2d5d3e3deb043b1e9a2849a3b7a10d236660e342a3eac75d4be23ea115ad71bf966efb4b7bac27dedc6b0cf7616e1932ca1028ae7df83a31b21f0bec0344ec53","ssdeep":"","tlshash":"ca512ccddd308c005652da1374f5117f494548445ec2ece29dcb9c564f770fa651beca","first_seen":"2024-08-20T15:05:03.806829Z","last_seen":"2026-03-26T22:58:47.542708Z","times_seen":5,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/Ethereum-Classic-ETC-Logo.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/Ethereum-Classic-ETC-Logo.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 12455\r\nLast-Modified: Wed, 28 May 2025 11:55:45 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c1-30a7\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"18a2d479ec7cd14dff64c0dfe816986b","sha1":"57c63e53f8778f59b82c66d86c2152f4cb69a89c","sha256":"f730cae8ea3169acd70d25aaeeebdb2ca41711afe7c01a7de6b0b91060e29c13","sha512":"759fab9afab88e4540a551893fa21c59d576a00e7e306ba62af6cf3ee2173cde0bd9941a868b4b4987580182939873771891c0bfde7c6c422afeaa17ddfa6ca7","ssdeep":"192:WS57B12V4VGXl4rBM/Oy9S8cQKmC0/0NlTMEcAlcBTo4urCaiy0Tl6vCNGp:557BK4VQgib9cQweoNMx3mCTTl6wGp","tlshash":"fd42afb7db821877ebb5237603d687241a7298f60771da934ee6413612df3c065adac0","first_seen":"2025-12-01T12:23:30.55968Z","last_seen":"2026-03-26T22:58:47.504579Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/index-CTX_t7eL.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:58.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/index-CTX_t7eL.js HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:58 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1108313\r\nLast-Modified: Wed, 28 May 2025 11:55:39 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9bb-10e959\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1108313,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37527)","md5":"ef162c2cd67acd36c9993f59652fee4d","sha1":"78a617f3c3efdc492a1e4c4c91d2990a0b8cefba","sha256":"74041a9eb4fabe9a3cd2982df126ff9cafc78dd556f76e55e3b33aa3146f9382","sha512":"d1789000b58c243f0376955d44c140ec5044f885c5f6e9126d748e87a3c460741ca8f79796ff8f650f9a18ab69865b9ecc32aa006390704862216384600cd86d","ssdeep":"24576:q1lV2xhvNWGZvY62W68C1HAjVjYiorIcKWOI14ip2MnyAjbk91yUobXWoMUGgDj/:q1lMxhvNWGZw62W68C1HAjVjYiorIcKQ","tlshash":"d0350944e255a5eed93669c1f91e24043c2fcefceb5d4452827cba2d21f42e4632bbc9","first_seen":"2026-03-26T22:11:30.652485Z","last_seen":"2026-03-26T22:11:30.652485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/pm-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.109Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/pm-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/Group-16694.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/Group-16694.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 3893\r\nLast-Modified: Wed, 28 May 2025 11:55:44 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c0-f35\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 50, 8-bit/color RGBA, non-interlaced","md5":"4a205ed3b4fe503fdb68babd9d5c8ea1","sha1":"ecd9d3412ea6e2d4f2a2f392e0c35db1e585bb8e","sha256":"5388788163fc7a360d07462723e28b599f7e53a0878dab493ff8a967425c4ad3","sha512":"68f1e2eb7bcc6500032b0e95482d5bd5e86efbd8179dfa44f81165700f8a9c3857cef74098223470cce13792ede7dc0cab079eed4602762da1790d0e2f564070","ssdeep":"","tlshash":"b9815cc1938a7749c001cf6c4ff8d6f024240a9385e2d6a7097a9d305d976c8fa463e5","first_seen":"2025-12-01T12:23:30.534455Z","last_seen":"2026-03-26T22:58:47.549921Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/88x31.jpg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/88x31.jpg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18599\r\nLast-Modified: Wed, 28 May 2025 11:55:50 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c6-48a7\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 88x31, components 3","md5":"2a45a681083fd87e0253f0b28ce6ed8b","sha1":"1d365dff2ba1534efdb45b783a2ad5ac100bfdd8","sha256":"a6d9930a826835f6d2c485d26ab844115296db1ed1c98c7b0d9e99b7d20a5cc0","sha512":"b5db0bcacfe9581c9d9f4f0dd654abd906f73f2c46f2b31e5318db54637e5343e8231b9399561dbf3cb1f12a1d5f3975294842d77be342310b20f5500bb7c898","ssdeep":"96:PHzZkIOlx0gejFa67+UacFeuCK/reOKXU+MWn5vV2bW38/q7IL8hCSY1v9pbr:PH9keE67FFevK/ruXUD//xAh7Y1v9p","tlshash":"5a828d06acb13d42d94b6435a3c827216f617307d250ef4a76aeca03ef193987fa6019","first_seen":"2023-09-17T02:38:11Z","last_seen":"2026-03-26T22:58:47.535831Z","times_seen":11,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/calendar.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/icons/calendar.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 937\r\nLast-Modified: Wed, 28 May 2025 11:55:42 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9be-3a9\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":937,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ffed4c9749052442e489b0f935e4956","sha1":"cdc570fc571fcbb3460a50c9938b247921eb43fd","sha256":"8b858abdcb99aa858ace9f396754f99228697dbf54a6a1ccf448f95909a6cd80","sha512":"113edc1ff2aa9604ce2676d0c34c8309e701c1c04323da130c8e5ea0dd3b3316779dbe8259220fa00535297479e12afceae8b50a8fc41bb416ffbd13885b7bf0","ssdeep":"","tlshash":"8a11eaea1b2c969cc043b735aeb962441b3f50b33d7d82e090ee5b38a08295df307808","first_seen":"2025-12-01T12:23:30.569552Z","last_seen":"2026-03-26T22:58:47.54044Z","times_seen":3,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":1,"connect":32,"send":0,"wait":31,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-3.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-3.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=q68z9136gSoadVQe; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=7J2QFVz3Wcgx03FulqI0; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 21:40:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1202\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-4b2\"\r\nexpires: Fri, 27 Mar 2026 21:40:52 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9a02dbd05c23e032747f1878e02adaa","sha1":"ae022d0bafaf1ce6d645592d0245effc443fc399","sha256":"4fb2edf962693a04d32d79a08c0f0abff42e495c0d0df6a935d53b866a14a4ad","sha512":"ad39d1cdb37ae9c803bf34f6d886ae0670e61b0d09a1e9c4534abd36f5c1ad29f833a0cad7ecb2237c4354d7c03677ab34cf3e99c20b806db9f05d69e3234ad9","ssdeep":"","tlshash":"8621e724869ed448a0853a3b554f47656b2a4a1058de38b31ee51d7a05f42c1bc385f8","first_seen":"2025-12-01T12:23:30.566948Z","last_seen":"2026-03-26T22:58:47.533271Z","times_seen":3,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/Litecoin.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/Litecoin.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 1409\r\nLast-Modified: Wed, 28 May 2025 11:55:33 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9b5-581\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"0fc84fdbbf57ba2b420e505c05c51690","sha1":"3efa9a275fe3c89bd153f0885af312773af47341","sha256":"4e2a623d834fb731ee69ba74fa79a80183a91f1dfe99c9072fc80d66c9e4de31","sha512":"7a0c17eb214d3b9670eba910e0e8ca259112f30e2b6ac413305b923d1d258041f3c5b5fff464200b56abf996bd9c802c04eb3fb2721a5a9e310a7e628e9cc21b","ssdeep":"","tlshash":"7e2119fa5f00a158e9ffe8bad775cc25f6540dbd6200a827443b61a9362e462ccb6841","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-04-07T12:23:33.005165Z","times_seen":42,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-5.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-5.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":60,"dns":1,"connect":31,"send":0,"wait":0,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/blockchain2.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/blockchain2.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 403416\r\nLast-Modified: Wed, 28 May 2025 11:55:49 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c5-627d8\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 544 x 534, 8-bit/color RGB, non-interlaced","md5":"dcab04614c4cad5f28b9010b9475abcc","sha1":"f273b20f90955e5eb36c3c85f9fe14e80fb2b5cf","sha256":"be282f6d68e8592542d666d291cc98c9c1b76a59596478f5fceae1e1dbfd2a7e","sha512":"d69c8f82b4379fcc7e168d89951148e906be29d959469a955a248a7cc7d8b8cfb38e884cef7bc364f609a0734a36ae855f468758301a5a4979a42000bcd8c6f3","ssdeep":"12288:nV41rvpbCIqlxO+Stdecu/xcJImeaD5191nAjD:kCIqzkz1YcGmx5PiD","tlshash":"a48423f047e8395845dbe2eb609579ef46f0f0443765c142476ab82da00f9e73bab31a","first_seen":"2025-12-01T12:23:30.558297Z","last_seen":"2026-03-26T22:58:47.538918Z","times_seen":3,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":30,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/3-1.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/3-1.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 200879\r\nLast-Modified: Wed, 28 May 2025 11:55:54 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9ca-310af\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200879,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 540, 8-bit/color RGBA, non-interlaced","md5":"b70b5126f0f548791b0c37b5adf0d99a","sha1":"d7786343e8979559835f18869bdc73c288c10306","sha256":"47de1c2674a021d3442bbdb1c235f70e008dcb361736b5852994eabf007f747d","sha512":"c2daddf31b1e54c0beb62c4364be6ccc47cbc34c6a0b541b36a307d6a424867d2c0952a14323dbf17008c433b9bd68323bd156ccabe377690a76f94bd526953c","ssdeep":"3072:Ap2lXUcl98vBNcIQzZK4ALXwtlKbyJpAqK1o5RZGHn/gTfzq5cYJGyMUeB7sL:AQXU8IxQzwn8C+5rGHn4Tfu5vGQeB70","tlshash":"9214129e7448979bec1532869d01d90f0d78a20eb649a820b4ba47df7d0c3cfba5f761","first_seen":"2025-12-01T12:23:30.567978Z","last_seen":"2026-03-26T22:58:47.546635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":55,"dns":0,"connect":33,"send":0,"wait":70,"receive":63,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/okpay-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.106Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/okpay-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/keine62ea.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /scripts/keine62ea.js HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nCookie: site-theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 7843\r\nLast-Modified: Wed, 28 May 2025 11:55:21 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9a9-1ea3\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c9af5639a387b3bf619000b7cdf832f8","sha1":"128fde67438fde5828359c48aff8f8dc39234515","sha256":"90c02b917e4fb40932e85f97b74f490e7b49d5a8bad36697a7174d15c690eb56","sha512":"162dd8269f56903e92bb02aabd3cd4e95ac8a78cede18abf859abe6babaf05e47974395fa46a2eee602a683a9f71589d03eb4cb5247e369ab36961b3c65618d0","ssdeep":"192:uw5U/y8QVGtYnp2R/yBq51xyACRhEDoQyA5KNix2GYiNcyLFJuz7:tr+koU","tlshash":"edf1ae23b32532e3217be201add5b761533909e6f81b98d1c6b2590e2da48d7753fc2e","first_seen":"2025-12-01T12:23:30.549738Z","last_seen":"2026-03-26T22:58:47.520511Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:58.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 26 Mar 2026 22:10:58 GMT\r\ndate: Thu, 26 Mar 2026 22:10:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24056,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"da2f9a1f3b41840d93c338c4b248ad8e","sha1":"a7deb30ce7fb0d075da5e9faf1d1b229cc776d07","sha256":"1334350a42e985e91b20ac233fdd44142bc77a0d61079a5f26fee4f915044119","sha512":"42401c8b1c459ea43d2bb3818da94a91a9c10a5dcae0ed2405061a87f1c60efd1a501e4f76fb60a08db0b3abd7daaacc90363d4cf480eb646756c6315216206a","ssdeep":"192:fCPPa2Skrq4nbqGIwV4G5zpDCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIw9:6SqqY49t5qY4yf/qY45uOqY4P","tlshash":"89b21b9000171850ab435de633ce7e34ee0f92626044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T10:19:30.069328Z","last_seen":"2026-04-24T14:01:22.358306Z","times_seen":10752,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":82,"dns":1,"connect":20,"send":0,"wait":39,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/stp-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/stp-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 5258\r\nLast-Modified: Wed, 28 May 2025 11:55:26 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9ae-148a\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced","md5":"31059fb10119f48504b25be434be7999","sha1":"7dd2ee0b1e8d746dbcb7421ce29ba65d2d9e8b07","sha256":"6569322b7fc01ab6ea5e7de32fee5c74e1ea0b418a9cfa70f955706c9afa86d8","sha512":"86ac9d1a5d6ea3331634311843fe55c4d629b442d754c157a2613033ba5cb9863fb25e69fe6e7d3c7d4b83524745b3eaea6c7488e72fc5e994c149df3d02615a","ssdeep":"96:QIc+sJs3tnDQXz5H+PrrkNcch0Lqo1Lhl0T9HAHvip25h:QIcPax81Q3+ccWLBzlUwvl","tlshash":"0eb19e5525b8b7f55b3c7366ef2f2349dee332d70b0648d5332586e23a844423ee4552","first_seen":"2023-07-05T00:24:46Z","last_seen":"2026-03-26T22:58:47.509248Z","times_seen":5,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/tether.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/tether.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 4190\r\nLast-Modified: Wed, 28 May 2025 11:55:26 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9ae-105e\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fd00bd554bd1ca833ec620805031e48b","sha1":"c6b6e11542ae449ff360762f9ce3945425336451","sha256":"7578e838618acf4a9d299aab575bb8fa0868aed89a8a5b53c544c5997a7cefd1","sha512":"3a5e9b2b1aaa0fe2811f26c036d1d0828db191bf3a8040e7d8476cfc3cfc6f9de79a1f5fb02cc70b4726e8fbb4b210a32770ac8c315dc3703d9b513208fba7b5","ssdeep":"96:1Fkjn/r4IBWa8DuPs0NZJr6MxnCn8m4XZJ6etlqz3MMCNd5k+sbQn+:zkL/c48oXBCn8m4XZsetlK8MYk+p+","tlshash":"cc816daaffcdd45c904dab5ff50d6988ca39167c43e0608f43f76008ad071af1a5056d","first_seen":"2025-12-01T12:23:30.548662Z","last_seen":"2026-03-26T22:58:47.550538Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/app4963.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /scripts/app4963.js HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nCookie: site-theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 175143\r\nLast-Modified: Wed, 28 May 2025 11:55:21 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9a9-2ac27\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":175143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ac6fc29a85b92bbe399ef4ec3fb46de6","sha1":"ffed7bd4a24b102b3447671b943e29228000f989","sha256":"6cfa877c8b5e249b08d4fdcd4e27552e4c9346e690d96c2c11b7af43a16de736","sha512":"e7d579c32888cca63a312ea6cb7310bdeaec386648cb883f08bfdf6a6a858e66c478393e78f9ad7d861881deffe443476286c563d1358f201f5396aa9e224c97","ssdeep":"3072:+xP5sf0Cljh6wSR/VNIeQU3yP5Wzz/AzdQBCqjQoas2kyS6MJ0j2XcQnhjpPwXxQ:+xP5dCl8T3ykzz/aQBCqjQoas2kyS6MX","tlshash":"b3046f4b5350257980b7e32aaf99c005fa664b2f52414a6b3d7c498d1f7a82843f4ffd","first_seen":"2025-12-01T12:23:30.571829Z","last_seen":"2026-03-26T22:58:47.538208Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-2.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-2.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/bank.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.134Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/icons/bank.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/pm-bottom.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/pm-bottom.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 2693\r\nLast-Modified: Wed, 28 May 2025 11:55:28 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9b0-a85\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit colormap, non-interlaced","md5":"6a175477e16cace5b6ba1bd8b4d82098","sha1":"3638e14d662b9104de59e3a6f2b313efd3f49675","sha256":"63f65b1af34e0dbd752cc16b5c402e4144be5034587db867e38de1df499fa164","sha512":"56cd4689194fed7c00e7b103e0a755cdd14554a4df8194ba7a82432c1da163a2cd41b85b18a15e419ace65d0ffc633d073074aa2df8dab626d7b1276806f140b","ssdeep":"","tlshash":"a2515cb7277ed9ed35c1e93a02328e7c154a322432a1f4daea63496453f3e071863d09","first_seen":"2023-07-05T00:24:46Z","last_seen":"2026-03-26T22:58:47.539751Z","times_seen":4,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/site7f0f.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /scripts/site7f0f.js HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nCookie: site-theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2963\r\nLast-Modified: Wed, 28 May 2025 11:55:20 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9a8-b93\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2963,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7cf54f948b975fefdf2f3a7777fff567","sha1":"122514bb9cde7f5379a56767ebd82e236df6a90e","sha256":"da22b87172e673e669d8bb39b18b679d738c487672a5e5f39f65a4ee63b30482","sha512":"8820be457cc280fbfaf8c48333db091043716ceac2c83f0011fb8dc9c29387c418f58a277488ca88627af129c70051d943cb6ce6d3e45115b63879c103e84cbb","ssdeep":"","tlshash":"885102927978762dd1ff309da17f0150ee2ad0129d022c58e8ba55a46ee0b0a77d3c2e","first_seen":"2025-12-01T12:23:30.539624Z","last_seen":"2026-03-26T22:58:47.543556Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/hero.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/hero.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 101706\r\nLast-Modified: Wed, 28 May 2025 11:55:44 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c0-18d4a\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 733 x 621, 8-bit/color RGBA, non-interlaced","md5":"60e44947e9b63e993635ba1ed3b31eb0","sha1":"19faf60d67d9519bb1c1345917dcd9a5862b46f6","sha256":"c1f99926c527df9431f150f919148e98f27fce2b51feebb1fd33608f90227448","sha512":"47592cdb4f8a12cd9cd58caa2ff83a0d931244d4c974282e8977a3af71141f0adcda4d7fb2d559bb14c543e78e1f970e414e8c3dda3e619862ee24499a22ee17","ssdeep":"3072:lMTDCXEiOOYEKcEPSJxi74nNtpGZOMkBgRfX3G/UT:WnViVYEKJPSJO4nNrGNkBmHoUT","tlshash":"baa312b2467b911ad06ee43f09c9444002f88b1f25c2295c79d7fae5da7a970c7a4b2b","first_seen":"2025-12-01T12:23:30.557537Z","last_seen":"2026-03-26T22:58:47.524367Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-4.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-4.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ak1blBoP5jF1Z6u5; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=qOQONVxZixTsojv9YnU1; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 21:40:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1384\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-568\"\r\nexpires: Fri, 27 Mar 2026 21:40:52 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"692dbe9b629d4d50df6c53fc3f651437","sha1":"1467e3a946c83de986f42f4e5ff668bfe8c217dc","sha256":"7a7561e7e40fe6df2b806bbdaa6a3f964814df6f16507eb0e3e7fd5429b124ac","sha512":"02f3f406c1105f6d8219190dacfe6263124c89747f9571e884daaa5b564119f09e2ad3ccedcaeec0994fe2a7edafdb4c313e10b8359a6cbd056019192285f3cd","ssdeep":"","tlshash":"f321d8a654b40c937493b4f9bc705b00e139c0c61bc65eff2b24a0934f9b1842abf245","first_seen":"2025-12-01T12:23:30.576571Z","last_seen":"2026-03-26T22:58:47.509937Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/Bitcoin.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/Bitcoin.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 1906\r\nLast-Modified: Wed, 28 May 2025 11:55:49 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c5-772\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"91329c8c79c256bdead1c6ecb1c84a18","sha1":"7b07fcbdc7b54107c9b94f48f9153f25a68d78aa","sha256":"59ee7e0892e8b13482e0fcbb1107a9845b3e13d3821677f1d977942d66f20fd7","sha512":"926abad8f4d65f1e523ebfbb981a1d1379e005becc39b0ede185a9ba932650b81f381cee68d1cd6ba644452ac95cd1a2718d28e2f3270052efb2ddb9ff7acd12","ssdeep":"","tlshash":"834117f8a58b8534883e1806d0b40ffc7461a2063517d8066ad5f27e7ece7de82a1c43","first_seen":"2023-05-22T09:18:58Z","last_seen":"2026-04-17T05:59:46.783934Z","times_seen":65,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/scripts/keine62ea.js","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /scripts/keine62ea.js HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nCookie: site-theme=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 7843\r\nLast-Modified: Wed, 28 May 2025 11:55:21 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9a9-1ea3\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7843,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c9af5639a387b3bf619000b7cdf832f8","sha1":"128fde67438fde5828359c48aff8f8dc39234515","sha256":"90c02b917e4fb40932e85f97b74f490e7b49d5a8bad36697a7174d15c690eb56","sha512":"162dd8269f56903e92bb02aabd3cd4e95ac8a78cede18abf859abe6babaf05e47974395fa46a2eee602a683a9f71589d03eb4cb5247e369ab36961b3c65618d0","ssdeep":"192:uw5U/y8QVGtYnp2R/yBq51xyACRhEDoQyA5KNix2GYiNcyLFJuz7:tr+koU","tlshash":"edf1ae23b32532e3217be201add5b761533909e6f81b98d1c6b2590e2da48d7753fc2e","first_seen":"2025-12-01T12:23:30.549738Z","last_seen":"2026-03-26T22:58:47.520511Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/zbEleow5.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/zbEleow5.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 2086\r\nLast-Modified: Wed, 28 May 2025 11:55:21 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9a9-826\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced","md5":"8daa1117e406bcb768406226b647365d","sha1":"c05d3d0fc8e51d355851c201754b7b70dd0d99b6","sha256":"b94a544a914e010591aaf475f0ee906525295c6ce7314d0c9256e37188034199","sha512":"2e25cb3a9e068a246ad27e6e4a7f9684205fc8bbac3d6c59e00a84e27306a257ccc60903a8bd2e2ae82cb1ab8a86df27a80345801fd73e3a2a56ee1fa0f3013c","ssdeep":"","tlshash":"f5411abf45f2a867257ac90477a3e4bd3efad034cd2162e90b47a682cd5d0051c45c02","first_seen":"2025-12-01T12:23:30.573589Z","last_seen":"2026-03-26T22:58:47.545457Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-6.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-6.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/map-big.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.055Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/map-big.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/photo-2025-03-24-19-02-43.jpg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/photo-2025-03-24-19-02-43.jpg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 110623\r\nLast-Modified: Wed, 28 May 2025 11:55:28 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9b0-1b01f\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110623,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"bf7ba0b8ef5aa5fbe98273ca20dd0bbf","sha1":"8018cd044b739b645f454be6bf0989986e9f4d12","sha256":"98af1be01ea4bfd12c295fe8d10a675d6bf8b63ffd45e07f7420e069e70565b4","sha512":"4ae6194c661429fa67c3356ab9b900bd65c0c5b0b4ca9f2f5663588ef8435a24b64f29af53bbbff7c5859138dc70213864664e01415b1fab818e772e0f3092ab","ssdeep":"3072:+XNbfkG+Ui1aPKR4iIqgISr0rdFfoODlGzwi:YNbfky0XR1DlGMi","tlshash":"20b312b333df93f2f2c05276275f56aeb249170067ff476e900a96c05da5988bd483a1","first_seen":"2025-12-01T12:23:30.533548Z","last_seen":"2026-03-26T22:58:47.512259Z","times_seen":3,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":56,"dns":1,"connect":31,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/bestchange-1.gif","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/bestchange-1.gif HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2843\r\nLast-Modified: Wed, 28 May 2025 11:55:49 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c5-b1b\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2843,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"7339463059545271e39600202b62d23f","sha1":"dde2ed7b8c3f4ba6651de82bd1ca0193c46f7201","sha256":"9b45b7eebebec8911d3d3d4b1092f1c49f082730932a043ed34b0bd7cf6e29e6","sha512":"3b49bed9e4a447da64a281afcc53914a5d728ca339c5c6ef57f9defaaac75bcb6919b1d97f693d9b53c646f70893fa887ba076c1bad87545967c61fab6f584fc","ssdeep":"","tlshash":"cf515b59e58de98d9d17b1d0a18cf421f462afdc38837264c11e9f875d0d062f86c18b","first_seen":"2023-05-07T19:46:49Z","last_seen":"2026-04-19T14:50:33.477593Z","times_seen":77,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/favicon-1.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/favicon-1.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nCookie: site-theme=light\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 2144\r\nLast-Modified: Wed, 28 May 2025 11:55:45 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c1-860\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2144,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"1910ebba378b035f5dfa26351cc66225","sha1":"de3867fe6e4036fdd810705b49cc9d3984f15254","sha256":"cfae2ab2b73ccb267be14611195bd613405b08be80e8530eeaf8d07bcb6ba5b3","sha512":"952992920e31822a78fe1b515e20af9046f03082e0907e7b875c4cd231763e825b3a3e3ac33e41d1f9250ca257e33ba4c2403c8b4dac700047f6f1c3d9f4276d","ssdeep":"","tlshash":"e6410ad0116fec569f17a05fd7f2e6dc6e390cee4803a9c06aace1541d39d084931075","first_seen":"2025-12-01T12:23:30.532303Z","last_seen":"2026-03-26T22:58:47.521422Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/88x31.jpg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.092Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/88x31.jpg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/11149e3094c-e981-4110-b1c3-3bd3d8fc790e.jpg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/11149e3094c-e981-4110-b1c3-3bd3d8fc790e.jpg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1542\r\nLast-Modified: Wed, 28 May 2025 11:55:55 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9cb-606\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 88x31, components 3","md5":"d127159ff99fbcc4773648aebcbf95ba","sha1":"a2c746c7af7aca3a1ea07d5b6e7a4bc212a683c7","sha256":"3a6f7df0672886d01c7f0f1ffe01b9e3e4cc58119b245b51a78aed6b378a5eb8","sha512":"f4fac16420b0bc4afeaf63488d7835cf615792c67182a4c0c31a00eed171f2160cc7a86503fbb064334485d788eb49fc7da30f45b13cfc82af5088461fd07908","ssdeep":"","tlshash":"4f31c78f9ec72108dd068eb668f1d199c7b834e1a9c2e7cf50c25e6466988512ec228c","first_seen":"2025-12-01T12:23:30.550649Z","last_seen":"2026-03-26T22:58:47.528066Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/home/hero/hero.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/hero/hero.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Hnb3F86Q17lQjrPP; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=xhD39bYS43fiJo2tXzgS; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 21:40:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43070\r\nlast-modified: Thu, 06 Jun 2024 09:11:00 GMT\r\netag: \"66617d24-a83e\"\r\nexpires: Fri, 27 Mar 2026 21:40:52 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":43070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da1c820e373d7e3d15e66de3f4f12420","sha1":"3f19de2a079ec8d762d682b821bd032b85593f9d","sha256":"044362a07c3f0f895504499c455af3ef0e78aa654d0360120568d38801dbca49","sha512":"edc86b7a82c6b84dd0ca4bc29c420a63c8a873fc23d865b973ecf3a04135563d4b2e96204e7e0df27d6d766229449d9965780dd8b40c3ce675ef4f7048e9cc2c","ssdeep":"768:odcgJqFxP58XFJUykPa65JOlwEx3+DMg7YtE1xY8GbErYbqoNBCQ78NFwB:GbJqFxP58XFJKyMQ64g0tE1Dn+qoN980","tlshash":"dd13f1ed75aa052d3823a3747143722a961d207c4afe743c2d0f1bd2529f066c8fcab9","first_seen":"2025-12-01T12:23:30.56612Z","last_seen":"2026-03-26T22:58:47.529564Z","times_seen":3,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":44,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/icon/lightning-small.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/icon/lightning-small.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PQ7U93f2qRKYKVrz; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=ismYWFCOIpuAkhaQ6ypE; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 22:10:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 123616\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-1e2e0\"\r\nexpires: Fri, 27 Mar 2026 22:10:57 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7950f030d2f90a02e23d4b9207f42516","sha1":"2d78cd40530756ca099023e9332a3539d62d25ab","sha256":"709fc29d7f40af810a83b2c0b594b37425ca3167d8bf22ac81b9fc15421a19a6","sha512":"1d0d4afecd5aef1ca9825d4dd70bb033fd5cf9db7b0f1a88dc16f3add9c21b5da412533b4969fabadd39a556ffe4b4c394dc2cf4d6ceb6ac02498a58075306b9","ssdeep":"3072:wBTFpLwirWG7wqBPsLP6gnkIT8QkSJn/AfYuFpUweWu4B:wBTnNb7weAign1XIfYuzQWF","tlshash":"a0c312031972b10da1bb2ba57235c4f69bd18ad7f597d0196c8ce813ab6d32781f188f","first_seen":"2025-12-01T12:23:30.535271Z","last_seen":"2026-03-26T22:58:47.517647Z","times_seen":3,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":147,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/lightning-big.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.127Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/icons/lightning-big.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/buttonY.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/buttonY.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 5426\r\nLast-Modified: Wed, 28 May 2025 11:55:48 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c4-1532\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced","md5":"34acd8217d9a1434851df0e4067bb79f","sha1":"ecf49b0b4f8fd4be2a339a0baece7efa15a2ca06","sha256":"b934ab49cd55f1d81f955b58697f614fdf5d72aa244259417fd2acfa7fd492be","sha512":"6c4590ca5c6eac6efd8feda94a005f611c1fab1927bb7d27a3c9b8757913e66cd987d2d15ec6881bf2444cf1b189afb99900e8c01758be4b79aaf8278a4110a7","ssdeep":"96:2PALv06ixnJa5rWhFge3h9fMrwqvZYdvYANj3+H66saN+3ntesFiqgJ0d0j:2YjvU1ZRpyhYBNj3+a6sakwqgJAO","tlshash":"48b18cf0cb4011116e06d97034e72719c0eda5b64bcd2ab207fad5a690e96a7e8e63b1","first_seen":"2023-07-14T03:45:24Z","last_seen":"2026-03-26T22:58:47.55107Z","times_seen":5,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/Cash-RUB.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/Cash-RUB.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 2649\r\nLast-Modified: Wed, 28 May 2025 11:55:47 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c3-a59\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d5119cacfaa58bde6271da7066dc4e32","sha1":"65554bf1b8a0d1811321d747223e9236380c5856","sha256":"1599beb47229be207e725654c9b456143c9a13ea87b9f4f66870b609743ead6b","sha512":"de36990ff03a7d378bae83197149b73df57ae59f7d7d8dccb0cefc4b78d1417f7ca3123e63ec7e6601253e0d55ea7948336c06cb1c4a22b6d05e03da28fa401c","ssdeep":"","tlshash":"bc512b99f2954c015075e1d628f05027ce1a05c0dcf8f66b35eadc23499d5fae85f2cb","first_seen":"2025-12-01T12:23:30.577413Z","last_seen":"2026-03-26T22:58:47.507048Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-3.html","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-3.html HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":58,"dns":1,"connect":29,"send":0,"wait":0,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/Group-16694.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.080Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/Group-16694.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-24T15:19:40.671292Z","times_seen":14148791,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/map-big.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/map-big.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 476708\r\nLast-Modified: Wed, 28 May 2025 11:55:32 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9b4-74624\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":476708,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d92567b3910ffd91c242d56b53b00ff","sha1":"590f753202523d5d16773ebb03fe17646e245095","sha256":"0f9614223ccd9b12924d3f900f1033cd9905ea208cbcb9340a01f779962a7057","sha512":"96c1cf0393663d633a48f108dbbfc2eb9294d07b7aa7fc2c4b8ad0fe2ed98f8e9ec86548aa7f8c4cf354110d6bc493857019e0afc1dd56975e4346d6c7919766","ssdeep":"1536:aKHojyvVULwHB7YyZE7LXMZjjW2vW00Dv+BV305j7ijDMG0bPNzSrcBZldLSdtW5:zM7ualX95z/gHEzet95IL","tlshash":"67a4d8cc3b7099d448cc8bebbf1151dc7d1ba4bb9a8a4a14c05d8f6d24d682c9e1ed87","first_seen":"2025-12-01T12:23:30.579187Z","last_seen":"2026-03-26T22:58:47.527328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/icons/bank.svg","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/icons/bank.svg HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 748\r\nLast-Modified: Wed, 28 May 2025 11:55:43 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9bf-2ec\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":748,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"330c38ebb66dd8ef60c17b2cca434a00","sha1":"ae8ca3dbfb0931fc11507b53b4ef7ae12ef6e57f","sha256":"314d640c57cb1cf604754c92701892da1b82cd092c53761d646bc918f56d8d8a","sha512":"3a3a22246b297161a78ebe38337df70d74d054a274c3d28a72154eb30dd4d21005642a0206a475544e84d4f9a132484d54da422c19079dece42d5a6f5170e226","ssdeep":"","tlshash":"69019ce48f2c029c008789fc4a2fa6f7035da0f1744c5c64f85ce5a975a3265d97b98a","first_seen":"2025-12-01T12:23:30.538228Z","last_seen":"2026-03-26T22:58:47.507796Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.com/wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-6.webp","fqdn":"keine-exchange.com","domain":"keine-exchange.com","tld":"com"},"ip":{"addr":"185.178.208.180","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 00:52:23 GMT","end":"Sun, 31 May 2026 00:52:22 GMT"},"fingerprint":{"sha1":"AF:3B:06:80:1C:B6:76:FD:9F:AD:0F:60:4B:7E:A2:43:20:1A:CB:BB","sha256":"5A:9C:DB:4C:CB:B5:30:75:EF:B4:E2:B5:C2:C9:53:F6:09:DD:94:7E:50:DD:20:7F:5E:F6:FD:E1:78:B6:B0:DA"}}},"request":{"raw":"GET /wp-content/themes/keine_exchange_2024/images/home/marquee-small/img-6.webp HTTP/1.1\r\nHost: keine-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jgnVpnv19sTcdZuM; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg10_=1774563059; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg9_=91.90.42.154; Domain=.keine-exchange.com; Path=/; Expires=Thu, 26-Mar-2026 22:30:59 GMT\n__ddg1_=C9Y8RrMJHfJfgc6Xx244; Domain=.keine-exchange.com; HttpOnly; Path=/; Expires=Fri, 26-Mar-2027 22:10:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 26 Mar 2026 21:40:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1306\r\nlast-modified: Sun, 26 May 2024 12:45:00 GMT\r\netag: \"66532ecc-51a\"\r\nexpires: Fri, 27 Mar 2026 21:40:52 GMT\r\ncache-control: max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 1807\r\nddg-cache-status: MISS,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93de20a9849bc2122912b2629cf08cf8","sha1":"9452dc02e913b94ab9d44a01f890e6d1eb9dfe42","sha256":"ac328e3b5929c0d9fa91f3e67e8eb2b7868d130a2f35a4c94d6a5f8851cc4426","sha512":"567463b2bdcd08cf8fe617f1c028ebf1b12d108fd7feb410b194dad7f41f860ba7dc11f6994d07227186f0e16fd9c9b9178e77a8254ebd6e679dd033bc08f13e","ssdeep":"","tlshash":"5821c8b3f9918cc4c43f984e5c0e379253ab2768959ed83806d4f791606e41b5693ad4","first_seen":"2025-12-01T12:23:30.53878Z","last_seen":"2026-03-26T22:58:47.541898Z","times_seen":3,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":23,"dns":5,"connect":28,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/Cash-EUR.png","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/Cash-EUR.png HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 2761\r\nLast-Modified: Wed, 28 May 2025 11:55:48 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9c4-ac9\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2761,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"23218323df153c2a12c238c452e40786","sha1":"80874d8ec41d7ff73e80251facff38e6f4d75fbc","sha256":"a517849b96a5c84d05d7b14c976012acd9cd0bc33863bdf4f9de14ec235d266c","sha512":"09dc38795bbc97c2e7ae11ec2932b132231ddaab80f8722c5eec4083b6ee50335244ebfc804a6b026043c4c5ddd0aed9a3a0b666c0f8f7868ecce34a042b5357","ssdeep":"","tlshash":"de511ac9f2c525015108ab9348e34063ce1b8580d9d1f9a5b98bd8571aa05fe589d0ef","first_seen":"2025-12-01T12:23:30.536026Z","last_seen":"2026-03-26T22:58:47.510845Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"keine-exchange.biz/assets/inter-medium-S2smMPjD.woff2","fqdn":"keine-exchange.biz","domain":"keine-exchange.biz","tld":"biz"},"ip":{"addr":"194.15.112.231","port":443,"asn":213354,"as":"International Hosting Solutions Llp","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://keine-exchange.biz/","date":"2026-03-26T22:10:59.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keine-exchange.biz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"86:8F:56:0D:61:3A:EE:4F:C6:C9:67:6F:75:82:AA:9D:8B:E4:83:7C","sha256":"31:BE:6A:E7:2F:70:87:C4:6D:20:2D:81:51:78:A9:1C:04:C2:6D:11:6A:0A:7F:69:35:D0:AC:53:31:8D:81:57"}}},"request":{"raw":"GET /assets/inter-medium-S2smMPjD.woff2 HTTP/1.1\r\nHost: keine-exchange.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://keine-exchange.biz/assets/index-B8eC580w.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Thu, 26 Mar 2026 22:10:59 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 105972\r\nLast-Modified: Wed, 28 May 2025 11:55:36 GMT\r\nConnection: keep-alive\r\nETag: \"6836f9b8-19df4\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105972, version 1.0","md5":"48a724aa32011bca394500f2dd72bf34","sha1":"00d1073a7bf039047797527bd1f809eb1659fedf","sha256":"e8cf7657ba5673909b9f5aa3f36f1be6662f70c70b63c39b6d7a17d943c33224","sha512":"73740244054bd91a65febf06cc82c3c9498fe0c27a759b0d35842d7cc624a2a738894468e9fa73cc25b97fd0d2e703e667b33a3dc7b8630abb27ecf9cff230d3","ssdeep":"1536:WOpryYRmxydOAuuuKafC1UD35hxR0aXzHO9sZ8kVk8EGG4DAahiDgIoRp2/:WOp+YGAuV93SHPGjlq/","tlshash":"f2a312ce4a4d3449e2a68835cffee909c47184716b23a25740ad94d687fdf771060fae","first_seen":"2025-12-01T12:23:30.564245Z","last_seen":"2026-03-26T22:58:47.54915Z","times_seen":3,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"keine-exchange.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}