{"report_id":"d5fc3db1-c1e1-4568-97a6-c1787d301119","version":6,"status":"done","tags":[],"date":"2026-03-26T03:51:30Z","url":{"schema":"http","addr":"bitcoin-xcel-app.de","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":0,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"title":"Bitcoin Xcel - Das autorisierte Bildungszentrum【2025】","dom":{"size":50992,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1984)","md5":"7fe5406e024811a1f5dd97bb4f087c90","sha1":"b9ef79edfc1018267e43f2e78bc377d6b493c817","sha256":"c8382ce8e6fa4df672eeecede6aeeea6625b1295587a62b69d1830ac0f06e91c","sha512":"52ccf6b6360b919394046ec1b4c4bedcd39745eb4d84b04bc25d811b11b5877b691d4d2c7eacb7623beab0188a80c2c1474936435092736ea481f334f008cee8","ssdeep":"768:K0ZDKekakK3p/HO0h5FNv1iQdgqXykbj04UhD0+bdA3gPx:XKekY3pPFLFZ1iQaqX8r0+bGs","tlshash":"81338066a4f611371093d6997b716f0e7fa2e60bca4f9a1872ac87d04fc7d81cc47268","dom_hash":"domhashc6024d8301a09f2c5e9a1e8e7cdef05f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bitcoin-xcel-app.de","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":0,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T03:51:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-03-20T17:01:53.941471Z","alert_count":0,"request_count":1,"received_data":80708,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-03-22T23:23:48.195369Z","alert_count":0,"request_count":1,"received_data":14171,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d3e54v103j8qbb.cloudfront.net","ip":{"addr":"54.192.209.151","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-03-11T23:08:14Z","last_seen":"2026-03-23T12:05:31.057124Z","alert_count":0,"request_count":1,"received_data":90092,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":16147,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":7,"received_data":219332,"sent_data":3901,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bitcoin-xcel-app.de","ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-04-02T22:44:02.911835Z","last_seen":"2025-04-02T22:44:02.911835Z","alert_count":50,"request_count":25,"received_data":538509,"sent_data":11856,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Font API","description":"Google Font API is a web service that supports open-source font files that can be used on your web designs.","website":"https://google.com/fonts","common_platform_enumeration":"","icon":"Google Font API.svg","categories":["Font scripts"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-22T22:31:48.48691Z","alert_count":0,"request_count":2,"received_data":36061,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/api/dist/js/loader.js","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"004a85a2f229a6055b37250fe4afb301","sha1":"138603702c8829dc64ac7d3d39e16680da0df5c2","sha256":"653a448c69253dc5b67cdf5fd1a1982f30ae00e1c81e22c2e301f7fd66e64e95","sha512":"82ece4bb3f156d0ae344a60e527b85842bf2f66e122d3bc3f580f948b6763cb1239636f05b3a8238a557817094b63a1ef1b4b420a9ea072671eab062260499cd","ssdeep":"192:24RjZ8HAHfh+ObfCKz35tlAXqNlq6JtCL12sqqqtr4UcIQD8M:3jZP/rw1stCjm8UoJ","tlshash":"e01273cdb2c7f45503a37635901f100af23e596ab40d9455e629e8e2bc7885ea327fac","size":9817,"data":"","first_seen":"2025-10-28T03:54:14.970656Z","last_seen":"2026-04-14T23:52:18.254967Z","times_seen":1722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e9e3ad57abeefde87342864450cc232","sha1":"4dc8676bf3417d597053d5f253fce034007f63da","sha256":"9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26","sha512":"b2d8e0e883fc8af91de120565298502b6e5b0f6e20275ecd2974de3e768a19a443f7facc2127201df66725c20451b924a69eaab78224073e385f14a5431c3a6c","ssdeep":"","tlshash":"34c0123621525559045b3d04a66ba14a758791b2a9025401dc7ee5a0311bc9aad0255e","size":181,"data":"","first_seen":"2023-03-07T01:17:43Z","last_seen":"2026-04-15T04:02:01.848817Z","times_seen":46591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","size":13188,"data":"","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-04-15T04:02:01.784752Z","times_seen":49922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4eafc63afbfd727bf94dca980d1f357","sha1":"ae2d8f4ad4074c71c4bc9b3874f8502746718ca7","sha256":"353249daed095cf2e27072cac7d186b5742b1c13c6b231bd0662c9f9eb08ee5c","sha512":"e550fe9324b8bb2007f22959f75cad0128d454c466814c406aa89e4ff861bf7eb09ee62c5c36aae46c361fd869dcac12a8ea929538d3396abe6f647cf83de29d","ssdeep":"","tlshash":"1dd08cf400a05007a402ac0a042e12003055232bcc883c243eaefb280f7ba0e88f234c","size":204,"data":"","first_seen":"2026-03-26T03:51:31.690851Z","last_seen":"2026-03-26T03:58:33.229478Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b34f52549d89aa7aaf032f48dc23324c","sha1":"f124ecac8f08131d34e34d8177e92052d38398f7","sha256":"3d1747b4368c76fb1b775e3d29e49ca246416f94b7a7307caf1a2e54040c7546","sha512":"e82253e7ca28c616e37e7b609e3ca20669a6d57afe2d51d28dfcbef6a8d981a37bfa9fae6b0859ab6460254992d56a887f4ca34e495d51612c1a476916766b8f","ssdeep":"","tlshash":"f341ed4e35bb229886ff7177ca9f99142523a107614acf483d2cc6e20f1523865a5fad","size":2045,"data":"","first_seen":"2024-08-19T14:06:55.506484Z","last_seen":"2026-04-14T15:14:52.812051Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"cde5dc5d2b23f11f63ead2efbc493083","sha1":"967e5d908eac4bd33f1560abcf295e065b7761fa","sha256":"821998535b77a14197626cb9cc922d72fd0b7d178f3f9e075b7c6608e82ac436","sha512":"c3324501019e16d8b92dff8dec8df51aa18573378fc366e91af9da8c5dc2b24dff0c79afce54da079525f0a10469e3174e32ebe36cb72c15d6d75259bdcfa96b","ssdeep":"","tlshash":"e5b022822000c00300a0a02c8320afa3b80aaa3b38080a0828280008e3ca0282300008","size":114,"data":"","first_seen":"2024-07-13T10:34:28Z","last_seen":"2026-04-14T15:14:52.812946Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6409e161a19054281ffbb5f6","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.151","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-15T03:57:08.903752Z","times_seen":222856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e60ac6f3939fa90daa2241cb710ac38","sha1":"7292d18e3aa9bec7a518e84afc783f831f693dcf","sha256":"836a95b2d0e9da0969e38f4aa50a9d5e76ed6f7c01a1a8d8a0815687db8f992f","sha512":"f8492de38e97ed582093b8aab72dc0c239d3b644b970f491ad4bf89609596cc9363f3d0152275b143acc6b6a82c0def408a6057b105e529f9ec39ad45e2c5ca3","ssdeep":"","tlshash":"6231259d2536037420e3efde67878300b92110cb720ce9057d7c8d749faa946d5a36e8","size":1621,"data":"","first_seen":"2025-09-21T22:09:24.783864Z","last_seen":"2026-04-14T23:52:18.268253Z","times_seen":897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-15T03:52:53.283381Z","times_seen":244454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"05e8aec230921e86b8424e3f21c820a8","sha1":"bcac6a2bc89e462133bf76f4617bc84e1af80848","sha256":"367755a8e20912bdec9e74f17c461c637dc01446f1b56cdcaa2de229c18e5621","sha512":"1b51cd8a9ffe709891b0796e8ac97932b33bb40e209acfa4a3000b7e8e3191cad0a3cdde3452ad4892e93041a02d200eac2235db83fadf6f324477efc0be288c","ssdeep":"","tlshash":"d6118e0d41b212005db7e86b87dbf344023a95272545cd1c3c8e45809fe941649cebf4","size":921,"data":"","first_seen":"2023-03-07T13:03:53Z","last_seen":"2026-04-14T23:52:18.268843Z","times_seen":1203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/js/bitcoin-evolutionpro-with-crypto.js","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"63e0f5c61ee608c0a9b666b5e8e9b140","sha1":"43b7533eead5339371d4a83281fe545db1c5d25f","sha256":"9f44478d431ec32eeaa7597852203fa8a036e9e25875e31bb8179f78ee910dba","sha512":"f2a00f280726c7abde85e250212b10110785044536d9b27a2386672e8b7280d8e4c05afa71a42c425f627e1b0d4dbb754040cbb654bc3b5c6161418078fe2533","ssdeep":"768:rS7AxJ6i5VpkgwdU2raGglwgtNZAv5cTCY6bZTpsbeld9K3MjhGe1LxedTzCcR5W:O7AeypwdU2rVe1cZKagHno4rC3dcegy","tlshash":"de4329ceb681b0b253a321f590af864ab2375555a40d881cf12ad8e53e78c6c523bf7d","size":55878,"data":"","first_seen":"2023-09-17T02:04:18Z","last_seen":"2026-04-14T23:52:18.259009Z","times_seen":1150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/assets/languageSwitcher.js","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dd666393aca76e7608e5ea0886102ae","sha1":"dc2f00219490ff31cbcbf1148e1a8e936aaf0531","sha256":"65baaf73001c13bbb1ae1934c4267e35f27855d25a0f2d2ac3dd20f0df6d66ba","sha512":"c48a2ee43e933e208bde25a512471e35b4852ef005561cdac60c13736916026de413079b6f3fbbfd63f04978a80273e2c68c48420ae78cd05b8e43fa17fbb438","ssdeep":"","tlshash":"34113d2f32f1083520ef61a733e72694b09440cf99056d1a372d9e9c0fdecc256b1ad5","size":1109,"data":"","first_seen":"2023-07-24T11:10:56Z","last_seen":"2026-04-14T23:52:18.252038Z","times_seen":2375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Ubuntu:700%7CMontserrat:300,400,500,700%7CRoboto:400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /css?family=Ubuntu:700%7CMontserrat:300,400,500,700%7CRoboto:400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 26 Mar 2026 03:51:08 GMT\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15461,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f8c8b567add1009a8d94b7f7b9243c95","sha1":"b38c9fa3793b9a4f5c35b4c4152e4555fdc6d1e8","sha256":"89af2d1da0176ac93de8ba10ac5f6778700f26174b40cdde9f003b8a68762a33","sha512":"1b0a84d4ce594ba60131056cb1e43f478c3d0a43e34f53b0c8b97fcd37ead71b83232690fbd9137ce5ef48f206fd4466ebdccbcbc62cbb9d90977a4b90e223d2","ssdeep":"192:FRV7y6OfuXRo7TbOmuwRv7M0OFu6RB7W+OjuNNsmNRNkNokNEqbN2bqGIwV4BNCI:zRPQPTadFsMHi3XhKqY4XY5gl","tlshash":"b2620091001b9500eb431cc623cf7f36ee5e61627494c179affd2da8adeac264365b2d","first_seen":"2026-02-20T13:54:32.972835Z","last_seen":"2026-04-14T15:14:52.779591Z","times_seen":18,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":134,"dns":0,"connect":28,"send":0,"wait":48,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 323099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-15T03:57:47.510584Z","times_seen":327235,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/poster_index.png","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/poster_index.png HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56526\r\nlast-modified: Fri, 20 Feb 2026 01:25:59 GMT\r\netag: \"6997b827-dcce\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3244c123f760d9e6ca41958f6b8375f5","sha1":"4e51715d14a480b50b21594f4662ca62c9689585","sha256":"5f36a4da2176110df0427c8a6dcaaaa15867169c4d3c85ee89129fa3a95f6f8b","sha512":"029d310f7eb6deb8521cb835e80fdde7639d7ed5f9a208d734702c1365dfbac659a89c829bb811e173df4ae217474726764be718fc50f862696f798e05b1d6d2","ssdeep":"1536:jypKNqo2rDwvhnUdLCJ5quXCguOQCoi6jUZv:jmCqo+8nU5CTRCCoTu","tlshash":"2b43f268d078dd89d0210e2746db248b1c327ab0d6ac2cdd2947cf654f7d24267f5be6","first_seen":"2024-07-13T10:34:29Z","last_seen":"2026-04-14T15:14:52.792934Z","times_seen":111,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/assets/languageSwitcher.css","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /assets/languageSwitcher.css HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 2630\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-a46\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"34f9a98a85713580849f35db50174b74","sha1":"f7d7c21843e2df3ec700d6564d092aaa9c9ec298","sha256":"8ea67b667dec3a3e1f29bed71a5f30c4338465e05f880586f2cb970159996e39","sha512":"ea323ed32f9e2e4e6ed5131fa92dc146b39a68d9dc1e7f1ccc1126e28c81c3a19fcdb84b580f2f80f673bd21f34eba1519cedb3d4f34c4f0ac9bb03eb29ecad5","ssdeep":"","tlshash":"c351f05b565305a9740fd90a6fd87f4193e4804b950ff9a6bfc221088f8b2ccc46278b","first_seen":"2023-05-17T09:57:09Z","last_seen":"2026-04-14T23:52:18.24419Z","times_seen":2340,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/features-bg.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/features-bg.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4176\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-1050\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1132x1120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d2fecc1aaaebed62ed41da86d0ba54e9","sha1":"2d5fadb362d95aabd7fc7167a3b419b64e4127d6","sha256":"a3d589e83d4ddf4a763a00b5536c38c0d8089ff5594600ffd531dda3f6fc21d9","sha512":"aa8dc0eb22b8554fb5053a972a596ad175f2829a6c2e540b04af32dd5f980195973a9622550de0ec946c450c850419e6cf6c134e3f6b8e9b28e2da0ccefc4fc4","ssdeep":"96:8NRF58DbYP2o+Bpfej9738igBrg8KY4EkI/Ok:a2oiA5D8igBrg8Kmz","tlshash":"09814cb29ec13951dd4ac1dc03f4b3c1d6ba55202b0b1957be4358cc15e4b91f897ea8","first_seen":"2024-08-19T14:06:55.477405Z","last_seen":"2026-04-14T15:14:52.774417Z","times_seen":104,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.4.6/flags/4x3/de.svg","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/flag-icon-css/3.4.6/flags/4x3/de.svg HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.4.6/css/flag-icon.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\ncontent-length: 131\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5d-d5\"\r\nlast-modified: Mon, 04 May 2020 16:10:05 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1269223\r\nexpires: Tue, 16 Mar 2027 03:51:08 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2Baf9vACqGBDasM%2FPAZ9tyep2RkLO2YSYYAocqU%2FSUn84LSV4M4sfpqPjUT5sN%2FnXpSK%2BIfhv3h6QcH8agljXUwJx87zJ2XDq5aHZhW2XnXtDerO29QUi6jPorc2jH8oI6fBiWSM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9e2331f818bf4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"3e726c2b6a59e6e4543c0a1534d93796","sha1":"d43327d97b3e75fd3bd8d8e0103ef182c2f4c93d","sha256":"226631a8fa9deee07022680ce0461b7a09b416b616c56ebcaf21f50e2b34ea8f","sha512":"8019d63ca62a39e82b2c3d1b1beba1963fcf76260d8b356642e640e57f36b94bff9ddcae1a4a1b0f1ea2610bbb49c338d53f3f42dd8d085b8002391e22dd74d3","ssdeep":"","tlshash":"1bd012a9d62d7a14c544c7301f7c71e6d2e9e0ca624810dfe8701dad106e4a7dccfae4","first_seen":"2023-04-08T22:54:24Z","last_seen":"2026-04-15T03:36:51.781102Z","times_seen":1743,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/css/components.css","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /css/components.css HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 29985\r\nlast-modified: Fri, 20 Feb 2026 01:25:58 GMT\r\netag: \"6997b826-7521\"\r\nexpires: Thu, 02 Apr 2026 03:51:08 GMT\r\ncache-control: max-age=604800, max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29985,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29985), with no line terminators","md5":"cd7bf3efdb1f7b0f5e4f7a8b4cc24a0c","sha1":"f796be80615d73f1def6c155fb90f7a547169dba","sha256":"25244b309cff70775c338fb3373a2a94273872101e1f2c90db75892777b7def6","sha512":"5e790cada5f6d191c5117d59a285680a48cdf96afc341eee28abbb98b8f6b3b313361eac11a1c4259ac6d2a1185e355fc9ebc7995535784eaa21906fe712cf57","ssdeep":"384:sfpkOWjh7B9LVmGYaeSeZM6TjMV1vxp7NQ:sf7A1Fqafz6/q15Q","tlshash":"92d2963195842198f427c523a5d0fbad2e2e5147f7538e9ef842b92781cf4c92937e29","first_seen":"2023-09-17T02:04:18Z","last_seen":"2026-04-14T23:52:18.256394Z","times_seen":1574,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/form-bg-ctr.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/form-bg-ctr.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33934\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-848e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2215bfb0b7352fb7f24c93eee607e6b","sha1":"a93be8528be14a9c20ee15b448aec928226c5680","sha256":"b1dd661302039dc9387abc3cd8b80c9f6ec22668ea6c2e417908544ab3bcb6a7","sha512":"cd58407c5a8815d6441d51f337f2c1a44bc013077c3f2c63c215a94e52ef68cae06e6da8da2daf7964b4501e296980b69c6ed2cd4260f3cc0df77010dc2bf380","ssdeep":"768:I3qrAQL8Y3jiStvPJ6qeB4zm6tP7SZNF/G+ezLe4k:I3xY32IkqeCzRtTSdu+r","tlshash":"e3e2e1253229aca484bb01d36e0c6ebb907c7f12cb863d42cc986d694739773b956c99","first_seen":"2024-08-19T14:06:55.47426Z","last_seen":"2026-04-14T15:14:52.777964Z","times_seen":115,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/btn-faq-bg.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/btn-faq-bg.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1034\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-40a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6aaa70493541cf9c7e7bc6a702e37e38","sha1":"1de5e6657a7e9e5ced29c901a7c47f21dd99c5f4","sha256":"056287cd20b00b12e25b72b090c95fcbbf0c7737a369000d4d70c8216759ab33","sha512":"00fd185c8b39063608317c7d888a35c53a723cb7a0647155fe6fc6c2b772521226519a8843704317bdea550ed969638d422a7f19b09c46f8dae23e93e2cdb727","ssdeep":"","tlshash":"c91172a2447b0d897a107956a47d2760344d004c3443acb7019f7efa91d2ea4263bda2","first_seen":"2024-08-19T14:06:55.479046Z","last_seen":"2026-04-14T15:14:52.763504Z","times_seen":104,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVn6iArmlw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVn6iArmlw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10736\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 18:54:16 GMT\r\nexpires: Thu, 25 Mar 2027 18:54:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32212\r\nlast-modified: Wed, 18 Feb 2026 19:51:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10736, version 1.0","md5":"6823bd07e7d4a2d10fe0c1f5ed98253d","sha1":"0a8913103ba14fff393acb96b8829b64609b6ebc","sha256":"a50e7f2d64f85c2d81fe7be1da5c943fde45c4ac47d3147f9b5a56b705b97824","sha512":"1b37938189a2aa521bdad4fc470ce705b2026fd5477405cd337b8d2ebdb7e50db6e2178064bf6844fc8f6b59a1f30bf5c73f0d4884beb6988032df64b1919465","ssdeep":"192:eoWLwktmyzxZuUpYBu1dCF44eummjPEpdQJaA6C+6nM0is1khz9qLLxxb1gI4w:kwWmAjuoYBydWFjmQcHC+6JkJq2I4w","tlshash":"aa22ae6efe70b8a791bbe535921d84912da9833a4118f77275f943403437be016cf328","first_seen":"2026-02-19T22:50:52.819692Z","last_seen":"2026-04-15T03:58:43.892756Z","times_seen":463,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":147,"dns":0,"connect":9,"send":0,"wait":9,"receive":1,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/coins/markets?vs_currency=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/coins/markets?vs_currency=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 03:51:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ntotal: 16564\r\nper-page: 100\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"203db3462031aceb4f1a417162b8b8ae\"\r\nx-request-id: f0e99474-9e5f-4efe-86f7-823c090a3bc3\r\nx-runtime: 0.101869\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: HIT\r\ncf-ray: 9e2331f929ad49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79432,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00afee45e25a0404cb243a579c8f131f","sha1":"b80c51dc9b4e8adc710d3cd8fe495ffe4b375db4","sha256":"735e3f44246dfdb12c18ec3de682a676f65276218fbab45cf73e1c1640c7fcfa","sha512":"71b91f99427a40814b68e36639f64a34221b9a8c2ef322664b7c98b4521fea5d8901ea36366b8ca988a2c53d4b8238a6ce92aafb7db08194bc32f999e4330672","ssdeep":"768:iHNjzFjfwB+QVrNwWnOcVZ0CuRoxYz1JLOjjilR0WYxiNztdaeBmciK/73j93Gke:ibwQMrNwWOckRoybs89X7jQkAY+","tlshash":"a77337a20d74dde7c291765a689b36640c2e7eca9cd9cd025fddcdcf40a4bea010ee49","first_seen":"2026-03-26T03:51:31.649604Z","last_seen":"2026-03-26T03:51:31.649604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":12,"dns":5,"connect":1,"send":0,"wait":118,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/main.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/main.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"f79a3b56717332ea45f2665454579943","sha1":"70e8b1e62b9e90ab1bf20852cf8ee4e55af7314b","sha256":"91fe1bb2ce31dfa39896c9a04ee23274a7e9dd0ad1fc91ec191e8b7307f652f2","sha512":"361d3cd55b890b2d8dd1b10eb979c0c18bb17dbd0b51cd1ac0449aa39ac79f485abcf8563ea104292d685c881202f84168f9056d4e06692e66f085cac6ac2611","ssdeep":"","tlshash":"eec08c6d6613bc8dca93227826c3a080c1d6932beaea45114580914370cb2998ac239a","first_seen":"2023-04-05T15:51:12Z","last_seen":"2026-04-14T23:52:47.20142Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /css/bitcoin-evolutionpro-with-crypto.css HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 39259\r\nlast-modified: Fri, 20 Feb 2026 01:25:57 GMT\r\netag: \"6997b825-995b\"\r\nexpires: Thu, 02 Apr 2026 03:51:08 GMT\r\ncache-control: max-age=604800, max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39259), with no line terminators","md5":"07760347c322a1ca3286210030efdb67","sha1":"436f9431f153dca3db3c95ff0be0b09eb84090a4","sha256":"3a28d4af92d8bb6b56876f69c7bf69bb1b3d6b04a80950a757f72b48248801c2","sha512":"e2574058cc6a814a8b1d58e0367f15a40f39f0a9075a75e813a46c070bb229d40a3250a2a7cb6e9932f14b9287b49d9a6cde558f6e8b11a5475a2374de0b5872","ssdeep":"384:OzBIS7U62RL5jVF7+TZENsyKqCa9jK2OqtcaeZJb3:OOeU5nXKcKdbTj","tlshash":"510332117a65302db02b94a2f5d3b9e9b0259503f39b8bfff9166936cd8e1e6063170c","first_seen":"2025-07-09T23:14:53.933668Z","last_seen":"2026-04-14T15:14:52.764742Z","times_seen":85,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /ajax/libs/webfont/1.6.26/webfont.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5437\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:06:28 GMT\r\nexpires: Fri, 26 Mar 2027 02:06:28 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 6280\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13188,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2134)","md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-04-15T04:02:01.784752Z","times_seen":49922,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":73,"dns":0,"connect":8,"send":0,"wait":9,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/api/dist/css/integration.css","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /api/dist/css/integration.css HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 9298\r\nvary: X-Internal-Proxy,Accept-Encoding\r\nlast-modified: Mon, 15 Sep 2025 12:06:23 GMT\r\netag: \"cf15-63ed5d5038dc0;64d23b7510bc0-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=432000, public, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53013), with no line terminators","md5":"b7699108ae9af3a8e93cfdb2930c5776","sha1":"1a119b393f62b09498ed2ae38256b8451eaee4d2","sha256":"b9c598602805d51e2c7eec8f1cf6c5a43af1f4109808bb935ef0b47c4af8f8c1","sha512":"891488031a287944044d74eff223fdeeede14a419a0a8c2f774db74a301f773430acc77d2552261f7b2785e4f10f4b6e0d9c4ddab8bbc46182537d9c2389bad9","ssdeep":"768:v2SAXXK6jU+4bixaACaglUX1OD6m+7KPSuWeA:ujXnYtUXwD6m+7KPSDeA","tlshash":"0a33111349a2242bf637c5a521a0da593667cc07fc360f6e9514fe7c8b839dd18b2be1","first_seen":"2025-09-17T17:38:44.36685Z","last_seen":"2026-04-14T23:52:18.257399Z","times_seen":2025,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/favicon.ico?v=1771550748","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/favicon.ico?v=1771550748 HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 25 Jul 2024 11:00:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztNo0NOJhUYZUrVSfNHUPM3ELEwt%2FagX8Z492oYTyKyqvbkvbrzm0JEqtqm78uwXTCr59YeQp%2FM%2Bvu9atRJUgK2H8WH8ZsTBgnbSmguaLXAxM%2Ft9rJ9CxiWT2zrkdBPyJzI7WeeR\"}]}\r\nage: 402\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"66a2304d-c41\"\r\ncontent-encoding: br\r\ncf-ray: 9e2331f7bd42ae1c-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3137,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"09e334f14d05f61478e6e6c892af84b5","sha1":"57cd7bfea27e8fc1031729747f32c06b3bce284a","sha256":"5f39ac09f1bb810f9e2a133093ce116f4d6ed7f818646f11dff365dd339fd2b9","sha512":"7e9f5a8a012b0f1ad89e1ac0dc1e33a7273edf3cce0238da30ae3a2b259bab8f6413ce373291433744be82c8063e5f0bd3e96124d6a6c1ed8728ce1599141c56","ssdeep":"","tlshash":"9f514c9e031e04ed9765815002a3abdfd406e5fc43e16001466eaaaf42ddb635c05bdb","first_seen":"2025-10-28T13:18:55.854494Z","last_seen":"2026-04-03T23:40:01.210748Z","times_seen":7,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 323099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-15T03:57:47.510584Z","times_seen":327235,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":77,"dns":3,"connect":25,"send":0,"wait":19,"receive":6,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 323099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-15T03:57:47.510584Z","times_seen":327235,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":75,"dns":1,"connect":21,"send":0,"wait":11,"receive":2,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/planet.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/planet.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62600\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-f488\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62600,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aea69d3840a6944d1412a50d02c1f642","sha1":"0415b97f62b49cf73570902c15d039fd315b264a","sha256":"3bc4740bc10a2213153da7fbcf06da323dde69487d11bdac3a3a5bcd82852d14","sha512":"d6e4658b2942c6616f638bd41f0a2212138c5035cd40f260aadc9dcc54873cf3abf496a9990e7c5d0fc96320c0f91f43af9c1cac0a0190958965198034f60cbd","ssdeep":"1536:dchvVYUsmHvbmwuVFsfDbup6fMi2zMRiLa0r+TFoqK40DTG:ajsovb2yDap6JwnrEFAfG","tlshash":"7f5302e8aec17b136c57b477a4abac1d7f8406b30ab04789642d3a43dc7918815f5ef8","first_seen":"2024-08-19T14:06:55.481411Z","last_seen":"2026-04-14T15:14:52.778794Z","times_seen":116,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/features.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/features.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36770\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-8fa2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d281d90f7e45b1199bf43c8cd459307c","sha1":"0d4aee0b46f8440773d49ba3b6280c42ca8c9bc3","sha256":"589c736525f6e5ca7deffe40580273a7f251f88593d401ac84a6509f6860e9f5","sha512":"8c5e307f652416607203c8fd683c3339b241c72a7863ab0f95988fd958a197b0235eabfa79a7a288521b64dadd586d9e310b7e39f15f6690737d67eeab5dbc27","ssdeep":"768:3xHWGxNMli0T4e3LEoApQvNnfPkQa16cC:3hxNMlie7vDvNnfM96cC","tlshash":"4ff2f11c713628a3a4dc86beb98e08e9f7524d86095d8efd46163b440a41f4f35f3cae","first_seen":"2024-08-19T14:06:55.483251Z","last_seen":"2026-04-14T15:14:52.784683Z","times_seen":115,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/btn-bg.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/btn-bg.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 834\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-342\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60b1110865e24e4ceebb0bb4faabedc6","sha1":"8f754f276e41a7c84a35a8b2a3cb801d7d76c3b5","sha256":"fdcf722c9cb30e69ff9891f18043f58e4584290eafd52504ea0ec0d89e11df11","sha512":"93188a9568518a26ea0b0ea2bf1e094102d6c31082dc6913d8f68f15e2372a9a183efae6790d5ae12781353fe6b9d0162750832104c96aff787d24b8d155c380","ssdeep":"","tlshash":"9601865085ef6569464037745371b4b2de0258f980c9ae8e522b80aeb698201395a70b","first_seen":"2024-07-13T10:34:29Z","last_seen":"2026-04-14T15:14:52.799629Z","times_seen":118,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/main-bg-2.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/main-bg-2.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73914\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-120ba\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73914,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6ad9e84253a02cca981dc950acd2f64","sha1":"23a3475c7de5cc5325200b7c651c21e46ceb8d2f","sha256":"4042d5cdb2a68bcc6c973821fee522cf5a673ef0fdc17bb3a229b2fd78c86e37","sha512":"a6328c89942f6da7e4bc977d19e9dfd2cce74348b472230dcadf153fe79aaeb766e2c60a4d61cb345840e4b4aee12ebb406be43600c68f25c8814d1ab0bd108b","ssdeep":"1536:QwLj41eIqoEUAO/hpnrZpTKAZmTGU+y3HseUDlwVDLyNuT2g7Z00:Qw/41eIqo1PnHZCx9HJT2g7G0","tlshash":"8273f13885dd07e6cac71db158cefa4d1f13224b5e8ae38267452e87479b182f884d7b","first_seen":"2024-08-19T14:06:55.473205Z","last_seen":"2026-04-14T15:14:52.773515Z","times_seen":116,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T03:51:08.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: text/html\r\ncontent-length: 50101\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-c3b5\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Font API","description":"Google Font API is a web service that supports open-source font files that can be used on your web designs.","website":"https://google.com/fonts","common_platform_enumeration":"","icon":"Google Font API.svg","categories":["Font scripts"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":50101,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1984)","md5":"d854a1d82fcdfa7eeb4c2f4e70a19a70","sha1":"85e8a250028f4a29ae01a350709d778800699ddf","sha256":"5c5fd48e54800ec623e24d26a3ebe8b2c45cbdabbe611e062604350e08267dc7","sha512":"47b20a5233cbbc843694bf01ab1fe21e865fd55dc2df884e7ba0419c588d3af605f95a259f9a30f15dcb1f5b6a065d4c0bac82a8cbea3a3cb1e18d9d07db2411","ssdeep":"768:wDKeka/6vRH3oh/VNv1iQdgqeTkbjo4U9D0+bdALgSU:qKek7vZ4ZVZ1iQaqeJ30+bGM","tlshash":"5d238f26a4f6112710d3d6957b756f0e7fa2e60bc94f9a1872ac87d04fc7e82cd43268","first_seen":"2026-03-26T03:51:31.676738Z","last_seen":"2026-03-26T03:58:33.218302Z","times_seen":2,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":81,"dns":13,"connect":28,"send":0,"wait":55,"receive":29,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/assets/languageSwitcher.js","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /assets/languageSwitcher.js HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1109\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-455\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1109,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6dd666393aca76e7608e5ea0886102ae","sha1":"dc2f00219490ff31cbcbf1148e1a8e936aaf0531","sha256":"65baaf73001c13bbb1ae1934c4267e35f27855d25a0f2d2ac3dd20f0df6d66ba","sha512":"c48a2ee43e933e208bde25a512471e35b4852ef005561cdac60c13736916026de413079b6f3fbbfd63f04978a80273e2c68c48420ae78cd05b8e43fa17fbb438","ssdeep":"","tlshash":"34113d2f32f1083520ef61a733e72694b09440cf99056d1a372d9e9c0fdecc256b1ad5","first_seen":"2023-07-24T11:10:56Z","last_seen":"2026-04-14T23:52:18.252038Z","times_seen":2375,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/feed-bg.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/feed-bg.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5552\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-15b0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1116x1478, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bb952fbecfccd9a815adf51059eb798a","sha1":"89e11675715d587dde922e4da04de80555588bef","sha256":"17a2eeb8c30e764eb668df97f8a34893a5b17f072e25c18604161739d00703d8","sha512":"55d07a70cb1240d32d518da09bbb8eae1e36d4a221185a12c88b5769ce8c4b0b3e1de0ba0f1f1728e6937fa4171faceef027c6c4c8808e73958674a3fbbf816f","ssdeep":"96:YutQeKNOCRmFXSNS4i/uxX+7OItJwthK1KRD0iR2NshjbD/HxMZEedWFj6UQFVbO:Y/jsCREiNS1uswzK1oEshjv6OOWFj6JW","tlshash":"f3b1399b9e44db4eba11d01b7832e396b1267ee0470b77cac782b735b024749f42e018","first_seen":"2024-08-19T14:06:55.480626Z","last_seen":"2026-04-14T15:14:52.76166Z","times_seen":116,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Mar 2026 13:17:59 GMT\r\nexpires: Wed, 24 Mar 2027 13:17:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:41 GMT\r\ncontent-type: font/woff2\r\nage: 138789\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21884, version 1.0","md5":"4279528ce0e7dc28919e6f8ce5f0eaa5","sha1":"a0bec563643727d81bf21d0acec08227d9269da4","sha256":"425c0713a8176f92273d378599c7eac57de7fafabd4bd0ed457b70eb8f80d371","sha512":"2b6a62ea544e93669893bac8bb8a5233d55cda9c3b293add6f312808cdf5127822446a516b66656cdae7409c5938ad1ff4fe0a1ba48e52134e141d6a78100507","ssdeep":"384:74kazv9DMAYqVNsLRxmVN7UX3oC4JjImMex3viFG5Bt7/br6CfY/lC7:7fazv9DM2Q+I3oC4JjPb30G5rtfY/87","tlshash":"0aa2e187b3eaa46d5787b931fa0a1900b8fe73f65d27da6484e087c9a1456c48c3dd3c","first_seen":"2026-02-19T22:29:10.595811Z","last_seen":"2026-04-15T03:26:54.309476Z","times_seen":8777,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":79,"dns":1,"connect":7,"send":0,"wait":9,"receive":3,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/logo.png?v=1771550748","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/logo.png?v=1771550748 HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3137\r\nlast-modified: Thu, 25 Jul 2024 11:00:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"66a2304d-c41\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 398\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCjBRBWWZKqpW4AXbN7VlgF0AZ7hamEoXmDjXL%2BQyNCRU3bLpxVmZOtElyuge0aAdJ8nYX3J6ELnjEjRpucm8rnHeaE9wpeqqMZXQDlJacVuKWJDIaaZIu%2BLLzQyB174ygGk3u6S\"}]}\r\ncf-ray: 9e2331f52dc7de32-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3137,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"09e334f14d05f61478e6e6c892af84b5","sha1":"57cd7bfea27e8fc1031729747f32c06b3bce284a","sha256":"5f39ac09f1bb810f9e2a133093ce116f4d6ed7f818646f11dff365dd339fd2b9","sha512":"7e9f5a8a012b0f1ad89e1ac0dc1e33a7273edf3cce0238da30ae3a2b259bab8f6413ce373291433744be82c8063e5f0bd3e96124d6a6c1ed8728ce1599141c56","ssdeep":"","tlshash":"9f514c9e031e04ed9765815002a3abdfd406e5fc43e16001466eaaaf42ddb635c05bdb","first_seen":"2025-10-28T13:18:55.854494Z","last_seen":"2026-04-03T23:40:01.210748Z","times_seen":7,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/css/normalize.css","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 1863\r\nlast-modified: Fri, 20 Feb 2026 01:25:58 GMT\r\netag: \"6997b826-747\"\r\nexpires: Thu, 02 Apr 2026 03:51:08 GMT\r\ncache-control: max-age=604800, max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1863,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1863), with no line terminators","md5":"335a5b1351b11607e99d488a4fb435ec","sha1":"676a51c37049628da4ec2431f80472f2ccc02b70","sha256":"d95ef29b3a8ea5e57fc7385f0b2f798c2843268c45b727d3a87eb5ef85504a4c","sha512":"5e2e183fd7363acc865e2d8facb9bf1367d551490aa53902b19a785adbac2dae2857545a70a8e767dc43c313fe4fa5527ca62c75685a7f8fcc19222974a8a853","ssdeep":"","tlshash":"b33186736b803a11aa334e707bd76a5973109132c011a9aaf04199eccfc75633ab5f4a","first_seen":"2023-04-08T09:37:03Z","last_seen":"2026-04-14T23:52:18.252623Z","times_seen":2593,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6409e161a19054281ffbb5f6","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.151","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6409e161a19054281ffbb5f6 HTTP/1.1\r\nHost: d3e54v103j8qbb.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 20 Jul 2020 17:53:02 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Thu, 26 Mar 2026 01:37:50 GMT\r\ncache-control: max-age=84600, must-revalidate\r\netag: W/\"dc5e7f18c8d36ac1d3d4753a87c98d0a\"\r\nvary: Accept-Encoding\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nage: 8360\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: E2iRXJtVgldFRUgzVn4nCp6Cuiq5AKX2xGL27uENsoYzcU9n3E8TnQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-15T03:57:08.903752Z","times_seen":222856,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":15,"dns":15,"connect":1,"send":0,"wait":4,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/btn-profits-bg.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/btn-profits-bg.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 608\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-260\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24d4cd22546ac4571449cbc8782cb40e","sha1":"896813fe1552177e9af81ee719b51536de82e6c3","sha256":"8352e92842c387073b668a29d19cc4f25255a6d601bd2c08976257a5e53617d2","sha512":"8abcdd0d3cfaf5929dd139b0f907ef74548a0e3abcdfeeba1b36dd376544b2c69f0eadb7c69f5c3851cda7ba08146be4304028ff05d75072504e0c4766a21ffd","ssdeep":"","tlshash":"77f0022eb2d2c965f9047068e1af60d2a515045834ae9d63c33eaa5886589269ba2918","first_seen":"2024-08-19T14:06:55.476284Z","last_seen":"2026-04-14T15:14:52.794958Z","times_seen":104,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/crypto-table-bg.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/crypto-table-bg.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3204\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-c84\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3204,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c0614996fca5dbfc8d6d18eaddfa6c8","sha1":"8b5f0c866466815d32952bb313a462aeeb436a6c","sha256":"fb50d4b89bb6b27585c1e46a47bbbd5f45c943949b8d30964aba57e5d4c9a920","sha512":"a8abeb416735e9d7b553349e9b4e6ed5b2f8abceb959f797bc698c43c42bd867b80e1c7fa390635b1a39537a1c66f387e1ca7a7a2b77905d3187e002d54118e6","ssdeep":"","tlshash":"11615b3d6c57c4a4bc1ece1e87c406eac52b95f3e3a9fa8714de1d090076482c42c517","first_seen":"2024-08-19T14:06:55.479855Z","last_seen":"2026-04-14T15:14:52.800445Z","times_seen":116,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/images/faq-arrow-bg_1faq-arrow-bg.webp","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /images/faq-arrow-bg_1faq-arrow-bg.webp HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/css/bitcoin-evolutionpro-with-crypto.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 390\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-186\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41113740e809e8390b7e4fe8f55cf0f0","sha1":"c010f098bdc841a9e198dd7bdedf238aca17c1e8","sha256":"d9882fd8cddf929cd25862015e98195de35b91d32411c146dbf4c903b8311026","sha512":"5ea55ac7793bd85e30fc8bc07a05dca1020d7854fd992e6eb6b2a5f71cce7a94629b9bebc4edfabd6136d24ab66dde76feb66ffdd6b9fdf3ada22ebf95e3acd9","ssdeep":"","tlshash":"39e081df901ce421dbac5f980405dd0a2083cd04c44dde6501460a283305924e5022cc","first_seen":"2024-08-19T14:06:55.478203Z","last_seen":"2026-04-14T15:14:52.801283Z","times_seen":116,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/api/dist/js/loader.js","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /api/dist/js/loader.js HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3530\r\nvary: X-Internal-Proxy,Accept-Encoding\r\nlast-modified: Mon, 27 Oct 2025 22:35:58 GMT\r\netag: \"2659-6422b85ea0f80;64d23b7510bc0-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncache-control: max-age=432000, public, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9817,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9753)","md5":"004a85a2f229a6055b37250fe4afb301","sha1":"138603702c8829dc64ac7d3d39e16680da0df5c2","sha256":"653a448c69253dc5b67cdf5fd1a1982f30ae00e1c81e22c2e301f7fd66e64e95","sha512":"82ece4bb3f156d0ae344a60e527b85842bf2f66e122d3bc3f580f948b6763cb1239636f05b3a8238a557817094b63a1ef1b4b420a9ea072671eab062260499cd","ssdeep":"192:24RjZ8HAHfh+ObfCKz35tlAXqNlq6JtCL12sqqqtr4UcIQD8M:3jZP/rw1stCjm8UoJ","tlshash":"e01273cdb2c7f45503a37635901f100af23e596ab40d9455e629e8e2bc7885ea327fac","first_seen":"2025-10-28T03:54:14.970656Z","last_seen":"2026-04-14T23:52:18.254967Z","times_seen":1722,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/api/images/loader.svg?74ab3a4b65d04814e59a43543c8379f0","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /api/images/loader.svg?74ab3a4b65d04814e59a43543c8379f0 HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/api/dist/css/integration.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1236\r\nvary: X-Internal-Proxy\r\nlast-modified: Thu, 19 Oct 2023 12:39:52 GMT\r\netag: \"4d4-608110d5e1600;64d23b7510bc0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=432000, public, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74ab3a4b65d04814e59a43543c8379f0","sha1":"8e5a0a73079044e6dca128329d6c95d39bd70266","sha256":"f319d450c3745ce3b0767b2402f9a26b57ffc4a49753d6726a208b70e6858fa5","sha512":"fc967cc53dbb50756d35b422d743e1d88934d2c42a18ba1c5b8d6cfa2c175fef65b9560575839404934f68a4ffcab59a5b330db86dde97c4246e5b85fd8be4d4","ssdeep":"","tlshash":"10212b19b404d86c0e10d5d8d2ef741a612fe1ce8b0146abb1c56d7ffaa54df20493ae","first_seen":"2023-05-22T09:41:38Z","last_seen":"2026-04-14T23:52:18.248666Z","times_seen":1950,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcoin-xcel-app.de/js/bitcoin-evolutionpro-with-crypto.js","fqdn":"bitcoin-xcel-app.de","domain":"bitcoin-xcel-app.de","tld":"de"},"ip":{"addr":"185.62.58.189","port":443,"asn":62370,"as":"Snel.com B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcoin-xcel-app.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 00:24:37 GMT","end":"Sat, 25 Apr 2026 00:24:36 GMT"},"fingerprint":{"sha1":"76:3F:AA:60:4B:31:C4:CC:82:87:29:3F:B8:31:34:9E:27:10:1A:CA","sha256":"D2:A1:04:9B:F9:A3:DC:4F:1C:F1:3D:82:4A:3A:5C:3A:88:DC:DE:0D:4E:0D:0E:80:06:3B:E3:C2:99:AF:5F:8C"}}},"request":{"raw":"GET /js/bitcoin-evolutionpro-with-crypto.js HTTP/1.1\r\nHost: bitcoin-xcel-app.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.1\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 55878\r\nlast-modified: Fri, 20 Feb 2026 01:25:49 GMT\r\netag: \"6997b81d-da46\"\r\nexpires: Thu, 02 Apr 2026 03:51:08 GMT\r\ncache-control: max-age=604800, max-age=604800, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55878,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32976)","md5":"63e0f5c61ee608c0a9b666b5e8e9b140","sha1":"43b7533eead5339371d4a83281fe545db1c5d25f","sha256":"9f44478d431ec32eeaa7597852203fa8a036e9e25875e31bb8179f78ee910dba","sha512":"f2a00f280726c7abde85e250212b10110785044536d9b27a2386672e8b7280d8e4c05afa71a42c425f627e1b0d4dbb754040cbb654bc3b5c6161418078fe2533","ssdeep":"768:rS7AxJ6i5VpkgwdU2raGglwgtNZAv5cTCY6bZTpsbeld9K3MjhGe1LxedTzCcR5W:O7AeypwdU2rVe1cZKagHno4rC3dcegy","tlshash":"de4329ceb681b0b253a321f590af864ab2375555a40d881cf12ad8e53e78c6c523bf7d","first_seen":"2023-09-17T02:04:18Z","last_seen":"2026-04-14T23:52:18.259009Z","times_seen":1150,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"bitcoin-xcel-app.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"bitcoin-xcel-app.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.4.6/css/flag-icon.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/flag-icon-css/3.4.6/css/flag-icon.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bitcoin-xcel-app.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 03:51:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1466\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5d-841a\"\r\nlast-modified: Mon, 04 May 2020 16:10:05 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 612750\r\nexpires: Tue, 16 Mar 2027 03:51:08 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5jjRs5fLvwnll%2FveVJidHsNNM5Sf1QCLAjWINEMmE0DeD7QvkytxajzJYDB5JgXmIBMZo%2BERFAmxZWh5GdUZ1bH%2BFSKkswP80Otc0kFqhCcQEgSDRQO9paS110u%2FTm5UHqCaNhO\"}]}\r\ncf-ray: 9e2331f7ac88a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33818,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (33818), with no line terminators","md5":"79fb36dda0a235254c3e31bf00b57065","sha1":"89eb6d6adc16de57dda315fb2b5602bfe5728ccf","sha256":"623702bd791d4553ae7226c2f48e26052e359573eb59fa98d819e9b248593e7c","sha512":"c5b2a3dfc61a9b039ad72c82f604c52c4c616db57aafc599c1a11861869e75f534828b10ba772fea9ffff737232b534eda7915fcdbf95f94e433fce33a795cfb","ssdeep":"192:o5B9y1dbzi85+DkROJup2j0S+iSM2nTMVZVJggtfQxK/dySeOW:ldK85+DkROJup2j172nTeVJgAfQxOBW","tlshash":"dae2f963da83e41fb60756337a167618a3df2492db814f2a34bf52b1d576244343afb0","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-04-14T23:52:18.246773Z","times_seen":6277,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":10,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:45 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 352163\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-04-15T03:50:58.587481Z","times_seen":10703,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":78,"dns":1,"connect":23,"send":0,"wait":11,"receive":2,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bitcoin-xcel-app.de/","date":"2026-03-26T03:51:08.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bitcoin-xcel-app.de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 323099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-15T03:57:47.510584Z","times_seen":327235,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":77,"dns":1,"connect":26,"send":0,"wait":8,"receive":2,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}