{"report_id":"ce7a8b51-fe69-4b51-9a38-28b2db5a6d15","version":6,"status":"done","tags":[],"date":"2026-02-13T22:07:50Z","url":{"schema":"https","addr":"bplusj-exchange.com/","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"172.67.191.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bplusj-exchange.com/","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"title":"B Plus J Exchange - B Plus J Exchange","dom":{"size":13926,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"97246ddbad8139ff4be875618f685a56","sha1":"1c15977ebcb83e818617b999d6bebbe0b4344157","sha256":"d8bdea1cc84b97243c73dab3cfd32b1abc1b43403e1ae0b2a01f1f19ca9f8920","sha512":"1cdcdaa76222b448f1dce962cb7253c12df2151f4b1709e7e550e2c64d8e675e3930a2e76bd63ea40d6f15dce1898b50c9b6afb3488061ddc0cfde5c578ffe35","ssdeep":"384:q7lnCQZsiQyBZFmUpdPrtzEFPrtz49PrtzE/PrtzpZVlQFi4IS4nnSvLRwwf:q7lnoiQG7iQF5f","tlshash":"6b521fb1094c6c77014726c260a4770da1cf8e7aef53e4d6b3ff4394a7c2d81d962a52","dom_hash":"domhash303e39626c668be25a5e76132683db87","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bplusj-exchange.com/","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"172.67.191.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T22:07:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":47154,"sent_data":566,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bplusj-exchange.com","ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-12T21:27:33.325459Z","last_seen":"2026-02-12T21:27:33.325459Z","alert_count":17,"request_count":17,"received_data":574620,"sent_data":9181,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":3,"received_data":147465,"sent_data":1680,"comment":"","tags":null,"fingerprints":null},{"fqdn":"alekseeva-exchange.com","ip":{"addr":"104.21.58.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-07","domain_rank":0,"first_seen":"2026-02-12T21:27:33.327247Z","last_seen":"2026-02-12T21:27:33.327247Z","alert_count":0,"request_count":2,"received_data":7089,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93637,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-07-24T20:23:06.757704Z","times_seen":22013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1828247e7d73542b9227a0087213e2c3","sha1":"2f00addb017da60566e3ca8314ac2213a5bdaf45","sha256":"7299291b90162227d949c4683c7f118c3ee3673455d9de62ebfae1058abe74d1","sha512":"f51307caf46b6a7d920778fa1f98d8b2ede2c0afa49703c22fd70a6dec1eed08b7e4930bc84933a8792b1f6d1b6214a53419ccf2826998e886f671960058a42c","ssdeep":"","tlshash":"ee3199817654a52c71fb30ab657f0104ae28862799020850f8bea9b12ff5356b7f2c5e","size":1852,"data":"","first_seen":"2025-09-03T19:06:22.190121Z","last_seen":"2026-07-01T04:00:45.86587Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-includes/js/wp-embed.min.js?ver=4.4.31","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82525747ca97f625aa0d0ffb9caefa30","sha1":"8c45e2ed1ca2b761ecc752b1cd7932b5935353b8","sha256":"46affe05997312dcd35ef3050ee666893ddd2690203ced1bff1349b1516c91c2","sha512":"db6c82e45a56ceb2b1fc079b96ed16100a491fc9bd5962e70030dc31d8cbf34b9d753fdd0e9aca01e77f3a23c7d4f90a808760d6534a40a59032773b3e267776","ssdeep":"","tlshash":"1521525a323cd43ea4d741d3bc8434cad2a21beda81204d14a78cc08f5e8f83596efd1","size":1436,"data":"","first_seen":"2023-05-16T22:25:04Z","last_seen":"2026-07-25T02:51:57.99062Z","times_seen":1773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba23883b51f5f372d28755e199785526","sha1":"a4082cd3950848f2b1b6125a509a8b028f4dcf31","sha256":"f87153921ae6b43428f4cb607b862453667493c5cbf8eaded2c378c225e9a53f","sha512":"71588a059b301f6df5522e776a91673f37a6e29bc6f269420eb4b266c90313d38ada0c9477f2f4f1ed400b4c23268757619d7099712e36298dd5ddcc586ee369","ssdeep":"3072:S4qsOZ8ddulN/6l+u3kisiHIwEPWqoH0tJ3HZ0iGlSnxxdZ:4ZquVfXJOiGlSnxx","tlshash":"5634e84c7241353692efa265102f260b7233a55da606805cb43dc9ee9e7de0471bbfbe","size":237802,"data":"","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-07-15T13:44:06.157857Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08a24670beb2eae7ef79a6d5ac23874b","sha1":"eca8a1978457941622833130e92b9b274e2b3a36","sha256":"3a16fd80d67008f1c947cf93ebb20e2af2ed1a6317e194d35ed15046076c4211","sha512":"3a2e9c8c3bd0a0d139fffcd0a4bf4f21b005838236868b02f345e7ca8a3431060e86f60775fbe0a009bf011d7fbe25e88aea3fed4a492330ae69b8181ad33cf7","ssdeep":"768:Kh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV5uMwMGM+zA:eiwDM1YuW+WkeBEfcPZ079SjCOoliMIj","tlshash":"e413a24a79eb12a2192334b94bef90497739d0231108dda07d4c53d0afd4db4a6fafe8","size":43892,"data":"","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-07-24T06:51:05.764105Z","times_seen":1422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b3ff3afaed0078ebc09821a1c94c74e","sha1":"284a9be6b429e2e122d06ec8aabe5a7a666a923e","sha256":"66fd5f0ab09c17fecefd1a68501f1bc2adbcea55ac147c4d3f16513942bb9ae7","sha512":"7279201e2a9bdcafa4b08ae3be65e0123869597a682d36f6a8a2bca820647877fb6a83d2f8b8dbdf680c3660c81b27299ab9e5e58aa564816a8d5753b13f34f7","ssdeep":"96:MQnEzSYEwYE8n+6fTYlHlqGQNaYpTeHuXAua/uotwLaQSZCKG5EV5yWvkfoEHHUu:MQnhYbYbZ6HlgB5u5Snsqb+Cc72","tlshash":"d7523095b31c35ba52f33026897926a5dd2ec177c00184a0fd7d24f0bf3096da7a6ead","size":13807,"data":"","first_seen":"2026-02-13T22:07:52.342902Z","last_seen":"2026-02-13T22:07:52.342902Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/images/tel.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/tel.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 1248\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IcrnR9DJwfLsM7%2F8r1%2Ff6qmnXBtMgG7BZrWKLi13LbOQR%2FPGt95ozMj2KJZO5I2fmjesCo3WWwtZtq2fsLtJ1ZAR0PqORrYgKxZwlk8XBGNSJY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3b25922618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 26, 8-bit/color RGBA, non-interlaced","md5":"ce221021e9bb040489bdce9285081035","sha1":"6e41f87a25d1142471e2cc5db99096124cbc136c","sha256":"ff821416c23568b3f5cfe2d0be63eed995de1bcde4e81c2f60a822bd09a92aa7","sha512":"e20c44fe4b3a4000654ffcdd4e9a6a6c9b04f153f71969f2e53a239b2fe573713c529ee0af1dbb58b78e494df2660021c225467e0d6b2457e01d0207d6cef8bb","ssdeep":"","tlshash":"6321b749fa4444c171a9e88570f790a35e131040cae8b9adadcfc86b2a30b60c235ee7","first_seen":"2023-08-06T16:12:27Z","last_seen":"2026-07-01T04:00:45.869418Z","times_seen":22,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/uploads/tether-usdt-logo-convert.io-.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/uploads/tether-usdt-logo-convert.io-.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 1305\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I1jQywNh6Pc4p8EtN5T976OG96TJOfDkJrRSDP%2FbMwDX1TawCcppnaikOIw6uOYatoVNup2FdaYbnMVxV10HU%2BBjWbhHzdD6MUHEUB8HO0F7ei8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3b27927618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"7435641caeea9aee71fe4798a5197352","sha1":"04aa9218ee360421caa919eacde3743d26367871","sha256":"a64e747d1cba070a2c5cf1ae79cab8c5eb47e153c00b91f0d6f5936068383151","sha512":"e5a2fc5dd2d4c477459250ed4871809180226ef70a98bf3a3a22cbe13e62532ff5fe5da84fcd211e9280b35fd7065e01a70b7d329aa917608389b78235409b21","ssdeep":"","tlshash":"8c21a3c543e06d6ac30a272253e25342ffad62371593294a6870b21edf03da4279c29d","first_seen":"2026-02-12T21:27:37.840105Z","last_seen":"2026-07-01T04:00:45.844696Z","times_seen":12,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bplusj-exchange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 00:01:23 GMT\r\nexpires: Thu, 11 Feb 2027 00:01:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 252371\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-25T02:51:57.929539Z","times_seen":315137,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":129,"dns":0,"connect":29,"send":0,"wait":41,"receive":21,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:07:28.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:07:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://bplusj-exchange.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://bplusj-exchange.com/\u003e; rel=shortlink\r\nset-cookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFYBlk6gmcM2l%2BAc6otd2A%2BMcwOWqdezPLP1bbX6kGqs4QQyHAwioDNgPkCfm1chxb6jLzhbxqXC4CaAOgiRca1cM9%2Five5NC1QQS7AkPpew\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7a38ce9f22d92-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14132,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"3159cde355cfe51dae502732b94f826b","sha1":"238453cf0722b9f1a026398ace1e1bf478aa6dd7","sha256":"e0a9a658cd3d5beeaefa87430c4aac58c628d8152bfef187a073abea40c46583","sha512":"af07021c935c55ff78da9e4bc32d285f5f8005e4463ffbb393c42dfeac12db167df3c78727b5b48845c0f2d9612b3c8182bf92f08df2dd4229c71bcb85d5a52c","ssdeep":"384:gVynhrMCjgAve6ij6b9csLDE5csLD4hcsLDEhcsLD0KXZ4bS4nkSlLYwwM:gVynhr6A2TvM","tlshash":"1052b8b1398ca4770153268740b4770da1cfce7adf53a496b3fd53b6a3c2d40daa2a52","first_seen":"2026-02-13T22:07:52.334791Z","last_seen":"2026-02-13T22:07:52.334791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1547,"timings":{"blocked":71,"dns":41,"connect":8,"send":0,"wait":1398,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/style.css?ver=1.0 HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cg2BJs47ZZN7UHeixUzcifiVTMGuPV1yP5ehYH81T08EK4GrJmActOa1syEEe8rjvc0%2F9a%2FSB%2FlPFwLPEQ9Ub7BYdsLtuuWq1W3i5sDbrhkqwA%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3969de7618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42254,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (323), with CRLF, CR line terminators","md5":"b4d9c15397bd43b2bf906654905e5232","sha1":"f2c2dbbabccd67e0ba1ab4a1c1a0da6ac777b40b","sha256":"b82690fd6cb50de8670e05faba3ba2e708bcd22aeef20bafbfebe799dc82b7ce","sha512":"6837647ac9b557099669ec8e1c6abcf1381168e9d8b1582aaef555b7604ca73257fe11d3f8d7806b3a347daf9f9db91a11d2214ebe855c279f8490817b8c3e85","ssdeep":"768:Oqf4eZa+jEY/n/63r+SdzUCN3VDdsxdu1tevS8oLBb1tm:Oq26S3/tdsxqeKE","tlshash":"5213c628ba41306df312e4d4efbb5b56cf1d4062fa1211f4bae81130c74a86cd9b6bd9","first_seen":"2026-02-13T21:43:39.492158Z","last_seen":"2026-07-01T04:00:45.87334Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1153,"receive":555,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0 HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:31 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rs2XmiUj1c7%2BqVdzrX2BWD0aji91IrdHj8CNUtdwk7rhj6HQuk19dhZKuldqN5WrNfeff0VVcYbmEMo5SX60winrDnO9ThORRsgRI1dbjDphoLk%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3969deb618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1828247e7d73542b9227a0087213e2c3","sha1":"2f00addb017da60566e3ca8314ac2213a5bdaf45","sha256":"7299291b90162227d949c4683c7f118c3ee3673455d9de62ebfae1058abe74d1","sha512":"f51307caf46b6a7d920778fa1f98d8b2ede2c0afa49703c22fd70a6dec1eed08b7e4930bc84933a8792b1f6d1b6214a53419ccf2826998e886f671960058a42c","ssdeep":"","tlshash":"ee3199817654a52c71fb30ab657f0104ae28862799020850f8bea9b12ff5356b7f2c5e","first_seen":"2025-09-03T19:06:22.190121Z","last_seen":"2026-07-01T04:00:45.86587Z","times_seen":15,"resource_available":true,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/images/marr.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/marr.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 996\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUBdKkATpP%2BFG2BbqiOeCPk9FyG93cewa6fjB0H36PjZvZ8vs3CgdRfIL78GHJRNpAQXsatFYIhROP0adGNjto9M7YhC4TpdIsJDo2lRix6g0IA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3b26923618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 13 x 4, 8-bit/color RGBA, non-interlaced","md5":"a92fb9467258623c0cbf76a682c1c002","sha1":"b244569ab82eb24ac9be02702edc2d7af8251e36","sha256":"17901dfcfe4bb9adfb8557c8ba948736610c711ad185a05118afc850b0112dad","sha512":"4af647bb0b1c9020ac50b8ca20c9ba1d11db89140c2a2ff735de0f6dba4b3c12e0f0c3340bfa6e02920d6dba69dbb2e69c6a5840a0b5d2dac10e408ce35d9851","ssdeep":"","tlshash":"d611284dfb6018519244d49334ebd0164f538980dd90d4e6b89fc94a8e201f54ced6d7","first_seen":"2026-02-13T21:43:39.452145Z","last_seen":"2026-07-01T04:00:45.84123Z","times_seen":12,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/images/online.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/online.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2567\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6tB5t0qjRHXPF%2Bm%2BOgoFmG8W9mdTL0i4MmtYZrEMmADVLPSlD0rouUAP8SsVnm6lCir6O0VVUB9oiWJRL%2FXKLha%2BJL0wiFCr%2FLdw8Shp%2FWGJeTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3b27929618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"cdfd0a16b6659c90d4169d9a2d2d3186","sha1":"983f13c84ea65d22a3c7b5690fe074429404b404","sha256":"4422cca3bcf98f40f056120cb1729fa65c299c51c5f6c19c62aec84fabc73cf7","sha512":"e03ca27580a61ea4e968bdb63755df0f98ee2f7df8ba855998f2fe9c55880de949f014132103f0b95b0a077c3831e5da3502aaa0610a126317e494fede64cc57","ssdeep":"","tlshash":"86515d9561a26c8052af66d22491c005db2718c5e7f0785bbeebc0878b3d4619e5e2df","first_seen":"2026-02-13T21:43:39.490733Z","last_seen":"2026-07-01T04:00:45.847524Z","times_seen":11,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bplusj-exchange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 00:01:23 GMT\r\nexpires: Thu, 11 Feb 2027 00:01:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 252371\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-25T02:51:57.929539Z","times_seen":315137,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":106,"dns":0,"connect":28,"send":0,"wait":29,"receive":38,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51 HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:31 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OhsAqnaK7jhnu6HTC06ADPqKCFl4PQW2VuxIsscRz5Ci1CV9Z%2Fd4znOg0EyAoOCqxiNXFNThjc1zD5GGEeKOyLxJPWKf25GQvvrqBpWM4%2BmFOQ%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3969dea618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43892,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"08a24670beb2eae7ef79a6d5ac23874b","sha1":"eca8a1978457941622833130e92b9b274e2b3a36","sha256":"3a16fd80d67008f1c947cf93ebb20e2af2ed1a6317e194d35ed15046076c4211","sha512":"3a2e9c8c3bd0a0d139fffcd0a4bf4f21b005838236868b02f345e7ca8a3431060e86f60775fbe0a009bf011d7fbe25e88aea3fed4a492330ae69b8181ad33cf7","ssdeep":"768:Kh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV5uMwMGM+zA:eiwDM1YuW+WkeBEfcPZ079SjCOoliMIj","tlshash":"e413a24a79eb12a2192334b94bef90497739d0231108dda07d4c53d0afd4db4a6fafe8","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-07-24T06:51:05.764105Z","times_seen":1422,"resource_available":true,"data":null}},"time_used":1719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1163,"receive":556,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alekseeva-exchange.com/wp-content/uploads/logovisa-e1696006951914.png","fqdn":"alekseeva-exchange.com","domain":"alekseeva-exchange.com","tld":"com"},"ip":{"addr":"104.21.58.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"alekseeva-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 13:26:20 GMT","end":"Fri, 27 Mar 2026 14:24:02 GMT"},"fingerprint":{"sha1":"E7:60:CD:AC:1E:60:D6:45:41:2B:D0:D7:3E:AE:22:41:79:0C:E7:9F","sha256":"BE:C2:BA:15:61:6D:84:26:08:69:A5:DC:F1:C3:8D:5C:80:74:D3:AA:36:E3:E1:C5:3D:1D:84:1D:0A:77:01:A6"}}},"request":{"raw":"GET /wp-content/uploads/logovisa-e1696006951914.png HTTP/1.1\r\nHost: alekseeva-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:07:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 2807\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Sep 2024 07:44:57 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 1454\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAivCEcMsm1zwVZXkJzmdAV0u5FdKBtuf89IEMz%2FLIZFGHms3b%2BZTXFqpupRcyqeBCOeHiS9lZ%2FJhJhtfLvNsNl5gPAHGYTpN9Mr%2BUOBFXhFpNk8\"}]}\r\ncf-ray: 9cd7a3970cab2d87-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2807,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 26, 8-bit/color RGBA, non-interlaced","md5":"bf751d84f8f5719cbd77c7b9d12eb350","sha1":"9092fed5a33375d2a76e65bdb03d2e80d12f8ef3","sha256":"7bf1f3d1fe352c8982ad1d67b7d8d4aaf2021db785d80e628420eccbfc750235","sha512":"cb42ac52d027ebc17fd9cf3c2c5a7be2af4562f75e237da1f729943e80689500b2e751f940b24153c4ca88ccf244b02df5499005d51aec316623cffd2746c3c4","ssdeep":"","tlshash":"31514b07717a1f4890da712c5d02eeb16b3c0b84c152be8b5eb8c07ba443a4da179e78","first_seen":"2026-02-12T21:27:37.822109Z","last_seen":"2026-03-18T15:21:36.561899Z","times_seen":11,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-includes/js/wp-embed.min.js?ver=4.4.31","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=4.4.31 HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:31 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWBmrKF78dN2AJgHWxHaqYAXjzqyRmvE3ZNqYNownsYDbTDdp%2BJo1srKokmJqjgaiczq5kf6fols4Yp%2FDyVvnn5dXMe0BdJ3UypM%2Bq%2FTATzQzHg%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3969dee618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1436,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1436), with no line terminators","md5":"82525747ca97f625aa0d0ffb9caefa30","sha1":"8c45e2ed1ca2b761ecc752b1cd7932b5935353b8","sha256":"46affe05997312dcd35ef3050ee666893ddd2690203ced1bff1349b1516c91c2","sha512":"db6c82e45a56ceb2b1fc079b96ed16100a491fc9bd5962e70030dc31d8cbf34b9d753fdd0e9aca01e77f3a23c7d4f90a808760d6534a40a59032773b3e267776","ssdeep":"","tlshash":"1521525a323cd43ea4d741d3bc8434cad2a21beda81204d14a78cc08f5e8f83596efd1","first_seen":"2023-05-16T22:25:04Z","last_seen":"2026-07-25T02:51:57.99062Z","times_seen":1773,"resource_available":true,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/images/dlogo.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/dlogo.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2197\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMiE%2FnKqdVvtZPvP2cLK6TtcsBbI9qGa6Dj39vR0VljnNxwkVnzgcYAOEuA%2FetisVk%2BgtCiGyK0QdAOCfY79FsFOoVcwJadY4Imd2qlXvCx13mY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3b25921618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 38, 8-bit/color RGBA, non-interlaced","md5":"2b83ce1610dd486039d9b6e4906f720b","sha1":"cdf502b1fb0a6c6e0ffee3502790fe38d23a7a32","sha256":"e86f791007650d3bf94f17c849dd9dea638b558fc92d03f4a8480259fd270b76","sha512":"b9ffc3c99b7a81158acf960f7151b787ccce5595d5c426feac882b5cae63d32c2fadfed2ca4c93e94c947475be6b603bfdf47218c6c1978d8c1cfe0955184730","ssdeep":"","tlshash":"a941d70ed8914c0351ad56a04cf08923677b1c8076e1e61a7acfc68b92650fbd67fdca","first_seen":"2023-07-05T00:24:46Z","last_seen":"2026-07-01T04:00:45.867718Z","times_seen":16,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":860,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/uploads/pngegg-convert.io-.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/uploads/pngegg-convert.io-.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2211\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2%2Bi7DR9n1fslocLmqXVKGtxLgA2INqgtMdMh0zZilFXXL7hXrpKl6se%2BeYLelIBe%2BycYQhMCD%2FSGTbmkJFdrB%2FnriYSsXgHhfWUjJj%2F%2BrPDwaM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3b26924618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 27, 8-bit/color RGBA, non-interlaced","md5":"e34fa1bec47f08085689bcdcaea4c00a","sha1":"f4e9837a4620e5e71ecc84e01bc73cf508f77de1","sha256":"dc9d9069353de03bd32265b0c4d6a749e7df4b449b22f69df3ad918e1bed52a8","sha512":"777ffea809532e4adf8ad9e2de1388084286a1e24dc327b9f9d82d18aeb8c1256f274acab1120920602a6870c3da16aef76aace08105d0dde528b6e813b9f023","ssdeep":"","tlshash":"a1412bec918598d9ef8eab13c3a32f44eff2d04553a1aa947b55cbf0526de090b95303","first_seen":"2026-02-12T21:27:37.833464Z","last_seen":"2026-07-01T04:00:45.861416Z","times_seen":12,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/uploads/bitcoin-logo-color-illustration-png-convert.io-.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/uploads/bitcoin-logo-color-illustration-png-convert.io-.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 1371\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOjZhk4Cr2ToVY%2BaQNW%2FTCsQgIH5p1Dr7zOCskF3UqAJcVymFWwV7phkP66kVKFnZlqzc2JEP0M2ixhOoNd5D1GaUszL6WPMS0LKhihC32MsTfY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3b26925618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"69bc2a1ec7c155f7d688b8ec8ecf61c4","sha1":"29af240ba9c503b257e0c88929b579ddc92b6072","sha256":"b9c7b706886bf439a6d36c939160664968cb48ba8e7b27435b4938a6550d533b","sha512":"9f97491440a44ae2952cfb830ef119d6e3bf1d35d5ebe9b4bfa46df3885943c7015b396918e3fd96b734295e2e49f595d4441a562487c0149333b1a917691269","ssdeep":"","tlshash":"442198f3f360758ec2434307236a16c1bff291d111cb0dc0ae60e1588d0869b06ac1c3","first_seen":"2026-02-12T21:27:37.834423Z","last_seen":"2026-07-01T04:00:45.870933Z","times_seen":12,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:34.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bplusj-exchange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 00:01:23 GMT\r\nexpires: Thu, 11 Feb 2027 00:01:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 252371\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-25T02:51:57.929539Z","times_seen":315137,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":129,"dns":0,"connect":29,"send":0,"wait":59,"receive":16,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C700italic%2C400%2C300%2C600%2C700\u0026subset=latin%2Ccyrillic-ext%2Ccyrillic\u0026ver=1.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C700italic%2C400%2C300%2C600%2C700\u0026subset=latin%2Ccyrillic-ext%2Ccyrillic\u0026ver=1.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:07:30 GMT\r\ndate: Fri, 13 Feb 2026 22:07:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f26a7ce9efdf3198522588e90722c271","sha1":"a51cf2052c4bf9775488622e223557c380cc4acc","sha256":"7023201ae131168da7538090c3bc8ba1cff47e2b3233842aff046d1814315711","sha512":"bf613ca6d1d3b2efa920368fc16431c72d7cd40e3da15ac58820eb343e8bbd6dc52280af7ecdecf5869d46764736073da8e99f6ec3e5c5eba62d9b3780fd4226","ssdeep":"384:+eO2pXt2tv/qY49Ynx8bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5H:YbPUiCAgkgHLFosL3Jbc2","tlshash":"09231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-17T17:43:28.294801Z","last_seen":"2026-07-24T09:04:30.758597Z","times_seen":1953,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":185,"dns":1,"connect":21,"send":0,"wait":37,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3 HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:31 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Az9GEOXJP5lkChPcBHak4X9wa%2BNlzNbYVv0tcyP4c0ZI12AjA7GJ%2FFbb8SZl03SkngWvVuuu3XF9d4U7P7Phiq8OhOJzYJqgOJU1SC5dH2TotPw%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3969de8618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65482), with CRLF line terminators","md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-07-24T20:23:06.757704Z","times_seen":22013,"resource_available":true,"data":null}},"time_used":2564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1166,"receive":1398,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0 HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:31 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iSdVyHix0QTMYz%2BDj5kOaKxQZEq2JBJxM5opPKKIAGuwGRC87ApvxiD2FyMNK8dX%2FK3L7rw3CbMCWd%2Fygf3FkH6%2FNabnpZx3Ec5cqnXPCMJ%2Bj0I%3D\"}]}\r\npriority: u=2,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3969dec618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13807,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5b3ff3afaed0078ebc09821a1c94c74e","sha1":"284a9be6b429e2e122d06ec8aabe5a7a666a923e","sha256":"66fd5f0ab09c17fecefd1a68501f1bc2adbcea55ac147c4d3f16513942bb9ae7","sha512":"7279201e2a9bdcafa4b08ae3be65e0123869597a682d36f6a8a2bca820647877fb6a83d2f8b8dbdf680c3660c81b27299ab9e5e58aa564816a8d5753b13f34f7","ssdeep":"96:MQnEzSYEwYE8n+6fTYlHlqGQNaYpTeHuXAua/uotwLaQSZCKG5EV5yWvkfoEHHUu:MQnhYbYbZ6HlgB5u5Snsqb+Cc72","tlshash":"d7523095b31c35ba52f33026897926a5dd2ec177c00184a0fd7d24f0bf3096da7a6ead","first_seen":"2026-02-13T22:07:52.342902Z","last_seen":"2026-02-13T22:07:52.342902Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1344,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/uploads/imgi-18-edrb-logo2-1.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/uploads/imgi-18-edrb-logo2-1.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 90612\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Feb 2026 12:35:31 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BZoxOlyI4uR1BU18NafoH3YWZBg7M0wINK86YldF8KJTEWSOaWYwR3FAlqlA0XF91iaLY%2BEUZxo2LkpFC7PFXgAFyfrS8RTwPntjoxqMqyITWg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3969ded618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1415 x 422, 8-bit/color RGBA, non-interlaced","md5":"04a49dec1dc34ef4edfe25d8cfd7a154","sha1":"ca9e94352f49d7fb29e4ec13dfb5878969510a0b","sha256":"f24a3daee91634af56d1bf82fed5928aa7111a7b43dd9bd9a233312c1c4ca910","sha512":"f3aebfb90d0bacae8b8af95376189f0b9d0a91e69f298c1fb9733e56083c86e237a6563b00b9bb500a39744320e1691657fbcf432c26ad5dbdbea0f6035d1b19","ssdeep":"1536:QTWsjGi86P2qhxRpHvH4LQP7RPO+tX4cMeYcKzBv+bWZeXJhlPzw:0WsjGinJ/RBvYM1O2icKR8XrlPzw","tlshash":"cd93df07e2842de611bd922638f74a44ec1be42d233bd2f85c8b48f2f9d9f193495878","first_seen":"2026-02-12T21:27:37.823308Z","last_seen":"2026-02-13T22:07:52.343607Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1143,"receive":1398,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/uploads/exchange.png","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:35.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/uploads/exchange.png HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 12110\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCbfDHiCc2%2B0A8AGJhkvkTQRnYzCkGdzRPuWuaVro0125L3qO4u8B91EuydG5qyi5b8GgpAUZKTHmYZNviYnRB7mwP0c%2FsDTQqqJZ2t912Zvv8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3b7e9e0618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"44fb93bfb579eb3912113b9441be365a","sha1":"777b5980f34d14e77b8a6882dc2e9ce61542f9d3","sha256":"bbb5a86554c3fc859618000e369e9b97efa07cbcc2938f7e1831d194457bcbaf","sha512":"a2109e70fb80bbc4fb6351c003dda4329adbf109fad22b94b8b18b8c9f9a00aab719b32a1a47b9cbd0e31bdb323af0705b25d2324443c3ea73d2e387d89b4018","ssdeep":"192:hpzUtjOQGd4Q5hlt/WH3MZdYngyVuN9IMWPLpgyaG2PxYIxIf51Y7cd:h1TtzvkqdAoNSMkpvaG8YIxIh1Yg","tlshash":"a942b156a364cc84969384cd87b717dbccf68e3ad421defa0d87c14a095d4ee0910dee","first_seen":"2026-02-12T21:27:37.835778Z","last_seen":"2026-07-01T04:00:45.853894Z","times_seen":12,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bplusj-exchange.com/wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2","fqdn":"bplusj-exchange.com","domain":"bplusj-exchange.com","tld":"com"},"ip":{"addr":"104.21.84.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bplusj-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:22:31 GMT","end":"Wed, 06 May 2026 12:21:18 GMT"},"fingerprint":{"sha1":"69:40:57:90:4C:78:3A:04:83:FC:CF:FD:5D:2F:29:46:42:BD:2F:FB","sha256":"BE:7B:3D:69:39:B1:5C:17:84:37:FA:DB:52:70:1D:1A:D4:21:D6:FA:BB:CC:D7:B6:CD:3F:B6:9C:DC:94:FD:1F"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2 HTTP/1.1\r\nHost: bplusj-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nCookie: PHPSESSID=20be42fed0c2ee57793f7adba20250ab\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:07:31 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQDAoZQRCbQ%2FfBDBRd%2BofCNtryVBfwKrDXj8KZ50SgfngZ8UxyyFg07gY5TNcqUzsOgr%2FkQsUfAjhw7Cq1MLUlc8yC%2BETq4RSv5I06iZtdukv4Y%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7a3969de9618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64558)","md5":"ba23883b51f5f372d28755e199785526","sha1":"a4082cd3950848f2b1b6125a509a8b028f4dcf31","sha256":"f87153921ae6b43428f4cb607b862453667493c5cbf8eaded2c378c225e9a53f","sha512":"71588a059b301f6df5522e776a91673f37a6e29bc6f269420eb4b266c90313d38ada0c9477f2f4f1ed400b4c23268757619d7099712e36298dd5ddcc586ee369","ssdeep":"3072:S4qsOZ8ddulN/6l+u3kisiHIwEPWqoH0tJ3HZ0iGlSnxxdZ:4ZquVfXJOiGlSnxx","tlshash":"5634e84c7241353692efa265102f260b7233a55da606805cb43dc9ee9e7de0471bbfbe","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-07-15T13:44:06.157857Z","times_seen":279,"resource_available":true,"data":null}},"time_used":4365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1162,"receive":3203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bplusj-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alekseeva-exchange.com/wp-content/uploads/Mastercard-2019-logo.svg-e1734108004524.png","fqdn":"alekseeva-exchange.com","domain":"alekseeva-exchange.com","tld":"com"},"ip":{"addr":"104.21.58.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bplusj-exchange.com/","date":"2026-02-13T22:07:30.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"alekseeva-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 13:26:20 GMT","end":"Fri, 27 Mar 2026 14:24:02 GMT"},"fingerprint":{"sha1":"E7:60:CD:AC:1E:60:D6:45:41:2B:D0:D7:3E:AE:22:41:79:0C:E7:9F","sha256":"BE:C2:BA:15:61:6D:84:26:08:69:A5:DC:F1:C3:8D:5C:80:74:D3:AA:36:E3:E1:C5:3D:1D:84:1D:0A:77:01:A6"}}},"request":{"raw":"GET /wp-content/uploads/Mastercard-2019-logo.svg-e1734108004524.png HTTP/1.1\r\nHost: alekseeva-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bplusj-exchange.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:07:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 3006\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jan 2025 10:18:03 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nage: 1454\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ss6YCC1T%2FY7RaE93MZiQZTu73daCUZG1%2Faz3WwwlLPW%2FMPxwoSRwXlPjnYMreSvOzOXxZsZWEYPwWkMvKh8hpcmYGO%2BuGU3rpqPhq%2F8iWUmi4%2F1%2F\"}]}\r\ncf-ray: 9cd7a3970ca92d87-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 74, 8-bit/color RGBA, non-interlaced","md5":"2d36ed51a9bc1824fa1d717e7ee19b73","sha1":"72663c51853052539e08319fafaa5cc66ae280a1","sha256":"7dada7d33f2c5d625db9608f9ef9b7c6cbeaadc493921da836e2be2091faff97","sha512":"b0a50b70a0de9eb8b027522ef394eb6849e2934b802bc954857a68ff9502047cebd47e2b5f539d985df7c7413752b7c938d8e1751ad805a859dc553dfa0915f4","ssdeep":"","tlshash":"51513abff371133e9e6561ed12af4b74376098188b7b008a494a87985b1a824e03116c","first_seen":"2026-02-12T21:27:37.841997Z","last_seen":"2026-03-18T15:21:36.55058Z","times_seen":11,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":55,"dns":28,"connect":8,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}