{"report_id":"e4f8b2b8-2fac-4bd9-be2d-48db7d34f7a9","version":6,"status":"done","tags":[],"date":"2026-03-13T16:20:20Z","url":{"schema":"https","addr":"aminalbertlunju-exchange.com/","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"172.67.173.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"title":"Amin Albert Lunju - Amin Albert Lunju","dom":{"size":18312,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1e543c2e9d65fb5a03857d3f803253d1","sha1":"2ac6f5c96e7c4160905c92412a755d18fb7ac0bd","sha256":"7ab8ecc1a5f7bed15302840490d807525cb890e0d60d87f5193a45480b0acb21","sha512":"1551c5c3f27dd823fc9060a9cb6e5721fd81ea864a768112c5c6c6e72724e6c9220df70a39da9011f0788bdd59bef5bce464a6ac08ede4274d2a7f556e76e8ba","ssdeep":"384:mWu050L090L8dEPZ+yOT5EiQyBZFmid8DdPrtzlDFPrtz5D9PrtzlD/PrtzyDtmQ:mWu050L090L8awyOT5EiQG7iB15YvLyw","tlshash":"0182dbb1448c6c3720872ac461a4670e62dfce7adf07d99ab3ff46d4abc3d81c912592","dom_hash":"domhash726b3adb1b5eaf5528d4e93c3923ebc3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"172.67.173.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T16:20:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"aminalbertlunju-exchange.com","ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-09","domain_rank":0,"first_seen":"2026-03-13T16:20:21.567846Z","last_seen":"2026-03-13T16:20:21.567846Z","alert_count":18,"request_count":18,"received_data":507854,"sent_data":10093,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":3,"received_data":147465,"sent_data":1707,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":47154,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"alekseeva-exchange.com","ip":{"addr":"104.21.58.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-07","domain_rank":0,"first_seen":"2026-02-12T21:27:33.327247Z","last_seen":"2026-03-06T14:42:57.449473Z","alert_count":0,"request_count":2,"received_data":7099,"sent_data":998,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-includes/js/wp-embed.min.js?ver=4.4.31","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82525747ca97f625aa0d0ffb9caefa30","sha1":"8c45e2ed1ca2b761ecc752b1cd7932b5935353b8","sha256":"46affe05997312dcd35ef3050ee666893ddd2690203ced1bff1349b1516c91c2","sha512":"db6c82e45a56ceb2b1fc079b96ed16100a491fc9bd5962e70030dc31d8cbf34b9d753fdd0e9aca01e77f3a23c7d4f90a808760d6534a40a59032773b3e267776","ssdeep":"","tlshash":"1521525a323cd43ea4d741d3bc8434cad2a21beda81204d14a78cc08f5e8f83596efd1","size":1436,"data":"","first_seen":"2023-05-16T22:25:04Z","last_seen":"2026-06-13T18:05:03.801023Z","times_seen":1674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1828247e7d73542b9227a0087213e2c3","sha1":"2f00addb017da60566e3ca8314ac2213a5bdaf45","sha256":"7299291b90162227d949c4683c7f118c3ee3673455d9de62ebfae1058abe74d1","sha512":"f51307caf46b6a7d920778fa1f98d8b2ede2c0afa49703c22fd70a6dec1eed08b7e4930bc84933a8792b1f6d1b6214a53419ccf2826998e886f671960058a42c","ssdeep":"","tlshash":"ee3199817654a52c71fb30ab657f0104ae28862799020850f8bea9b12ff5356b7f2c5e","size":1852,"data":"","first_seen":"2025-09-03T19:06:22.190121Z","last_seen":"2026-03-27T23:48:45.873562Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba23883b51f5f372d28755e199785526","sha1":"a4082cd3950848f2b1b6125a509a8b028f4dcf31","sha256":"f87153921ae6b43428f4cb607b862453667493c5cbf8eaded2c378c225e9a53f","sha512":"71588a059b301f6df5522e776a91673f37a6e29bc6f269420eb4b266c90313d38ada0c9477f2f4f1ed400b4c23268757619d7099712e36298dd5ddcc586ee369","ssdeep":"3072:S4qsOZ8ddulN/6l+u3kisiHIwEPWqoH0tJ3HZ0iGlSnxxdZ:4ZquVfXJOiGlSnxx","tlshash":"5634e84c7241353692efa265102f260b7233a55da606805cb43dc9ee9e7de0471bbfbe","size":237802,"data":"","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-06-13T00:42:43.022555Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93637,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-06-13T14:55:27.770421Z","times_seen":21630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08a24670beb2eae7ef79a6d5ac23874b","sha1":"eca8a1978457941622833130e92b9b274e2b3a36","sha256":"3a16fd80d67008f1c947cf93ebb20e2af2ed1a6317e194d35ed15046076c4211","sha512":"3a2e9c8c3bd0a0d139fffcd0a4bf4f21b005838236868b02f345e7ca8a3431060e86f60775fbe0a009bf011d7fbe25e88aea3fed4a492330ae69b8181ad33cf7","ssdeep":"768:Kh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV5uMwMGM+zA:eiwDM1YuW+WkeBEfcPZ079SjCOoliMIj","tlshash":"e413a24a79eb12a2192334b94bef90497739d0231108dda07d4c53d0afd4db4a6fafe8","size":43892,"data":"","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-06-13T06:18:03.251059Z","times_seen":1347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9511b4d06fb3dd39c75475b7e0c92f","sha1":"84cd9ff1dad88616c701a379f335ad4b136d93fe","sha256":"6ccb1bba7ff3e73df5dd24cece1d9aad5e3334f674000112fcb8bf0c7e4214c2","sha512":"e1cce80b8e32e4d10d95a3ceae16aef596cc348e8f5c245bc463eb88d69e2ac9b8c80bcdbf71db7e2a60e47e6d0f230f7bf1d03ecf36205da28cba25bea8fd1b","ssdeep":"96:MQnEzSYEwYE8n+6fTY0OHlqGQNaYpeWeHuXAua/uotwLaQSZCKG5EV5yWvkfoEHB:MQnhYbYbZpOHlggO5u5Sns2zb+Cns72","tlshash":"92524195b31c75ba52f33026897926a4dd2ec177c00184a1fd7d20f0bf3096da7a6ead","size":13843,"data":"","first_seen":"2026-03-13T16:20:25.619648Z","last_seen":"2026-03-13T16:20:25.619648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/images/marr.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/marr.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 996\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6%2B6T0vnQ3xDkqm9oJBgBQ7QcNnD%2BUdLhh4oOXlzxaKER9Bmkc0dvnhMguGAfCb8zUGPeuAY4Rshf7vaP9Zq%2BDdxE95W%2BD6%2F2CdRp6%2BfF8nd7NILw%2BLkq8KXUQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d173b27b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 13 x 4, 8-bit/color RGBA, non-interlaced","md5":"a92fb9467258623c0cbf76a682c1c002","sha1":"b244569ab82eb24ac9be02702edc2d7af8251e36","sha256":"17901dfcfe4bb9adfb8557c8ba948736610c711ad185a05118afc850b0112dad","sha512":"4af647bb0b1c9020ac50b8ca20c9ba1d11db89140c2a2ff735de0f6dba4b3c12e0f0c3340bfa6e02920d6dba69dbb2e69c6a5840a0b5d2dac10e408ce35d9851","ssdeep":"","tlshash":"d611284dfb6018519244d49334ebd0164f538980dd90d4e6b89fc94a8e201f54ced6d7","first_seen":"2026-02-13T21:43:39.452145Z","last_seen":"2026-03-18T15:21:36.547538Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1016,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/uploads/bitcoin-logo-color-illustration-png-convert.io-.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/uploads/bitcoin-logo-color-illustration-png-convert.io-.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1371\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7B0nn8fAHFJuseLwtC5MPKs%2BvBJ0MCbq0ykqZsnBRaEE3sJ2t0D3L77bM0poJAURu9TOK3mflwnnQFzTkkSMnjPOKgIvV%2BdUqqx91Gb3eYScLxqSjrdeOF09S3Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d175b32b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"69bc2a1ec7c155f7d688b8ec8ecf61c4","sha1":"29af240ba9c503b257e0c88929b579ddc92b6072","sha256":"b9c7b706886bf439a6d36c939160664968cb48ba8e7b27435b4938a6550d533b","sha512":"9f97491440a44ae2952cfb830ef119d6e3bf1d35d5ebe9b4bfa46df3885943c7015b396918e3fd96b734295e2e49f595d4441a562487c0149333b1a917691269","ssdeep":"","tlshash":"442198f3f360758ec2434307236a16c1bff291d111cb0dc0ae60e1588d0869b06ac1c3","first_seen":"2026-02-12T21:27:37.834423Z","last_seen":"2026-03-18T15:21:36.548142Z","times_seen":11,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/images/online.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/online.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2567\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ygP6N9VzcUeART8CMdPdTRakM0td%2FcMkAct7IcB4sW4c5%2FHkugCcJrL7yKNaG7xhttqBzqCN0hR5asqC8%2FDTu%2BC26%2F5dIUGXlMUOb%2FBLv%2Fgfh%2BRUGWaix9Cf0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d176b35b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"cdfd0a16b6659c90d4169d9a2d2d3186","sha1":"983f13c84ea65d22a3c7b5690fe074429404b404","sha256":"4422cca3bcf98f40f056120cb1729fa65c299c51c5f6c19c62aec84fabc73cf7","sha512":"e03ca27580a61ea4e968bdb63755df0f98ee2f7df8ba855998f2fe9c55880de949f014132103f0b95b0a077c3831e5da3502aaa0610a126317e494fede64cc57","ssdeep":"","tlshash":"86515d9561a26c8052af66d22491c005db2718c5e7f0785bbeebc0878b3d4619e5e2df","first_seen":"2026-02-13T21:43:39.490733Z","last_seen":"2026-03-18T15:21:36.535008Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1020,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/images/wliarr.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/wliarr.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1068\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqGKRNBv4f5jHqQwXgntHI%2BDFE7bQHFeBeDYmy%2B%2BS5KRvLmdWBfnTqoJD9qEbQn3ifAmkUXreHOpQcuN8hKI8Vaz6KHeCLjw%2BhTVxGfeL16t%2BzjOeMb%2F2qKO5Ms%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d177b38b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8 x 11, 8-bit/color RGBA, non-interlaced","md5":"9275007d6eb59662ebf683420e707066","sha1":"2a359105c682ed5f15efeb2341bb127ee1a8c51d","sha256":"c74f33f0b6d344089e0959d3034444902d4f2f31a2db37f98f8d65930e5ef5b1","sha512":"0024fa7c48a4aed29e70ccabee901a965ab8906b7c9c6ad4761f1555110481d9c6a5360de4a647f557fb72e2e9d323047bdf737cb67aec61ee4fc63938f8966d","ssdeep":"","tlshash":"9d114248f7122c8247cee9921cfad0238523488085dcf065b98ec85a09325e69a2e6d7","first_seen":"2024-08-21T10:21:13.061113Z","last_seen":"2026-03-13T16:20:43.724531Z","times_seen":8,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":870,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aminalbertlunju-exchange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Mar 2026 20:34:52 GMT\r\nexpires: Tue, 09 Mar 2027 20:34:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 330310\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-13T18:32:22.427337Z","times_seen":284944,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":205,"dns":10,"connect":57,"send":0,"wait":163,"receive":34,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/uploads/imgi-1-logo-header-210531.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/uploads/imgi-1-logo-header-210531.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 17141\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 09 Mar 2026 07:40:44 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBRuPhk9f9HXyCFceGt6Ww%2BztvgBPDsYz5qh8Ppyk45TSBpypl275gGW2qM%2BgJif5E4%2BLbrBgOhtSilIPV5mzJXrCb6570oameOTfCS5CO8sJYoGjqCmCF0oiG4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d10f9b6b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 569 x 125, 8-bit/color RGBA, non-interlaced","md5":"7ebfe1a5392e6499d5c457041a42ef1d","sha1":"0c983aa496ae66994a99c51349edae5bbefff101","sha256":"d509f341257c01d91515d027d4fdbd398b743114488ca94f2401043316b5878c","sha512":"174d80b2fa8e49f9af21ca6cd6cc21597c5efc4260fbb881bc89c4da9649c5df3d8ea3f3567cfa3b1a373b4d9140a68c61887846f708b62439f9845272744a69","ssdeep":"384:ARcEKojvtjNIpxRSsZm9Ai9Gak8Ijf5LYzybM0kj33U:2cEKyj0xY0d+FkXjf5LYzD0m3E","tlshash":"0372cfb767e5b1993aec2e41302324aa5da8217f32efdc39641d34e40a2c993d43482e","first_seen":"2026-02-13T21:43:39.484756Z","last_seen":"2026-03-13T16:20:43.726686Z","times_seen":3,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":870,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/js/jquery-ui-1.9.2.custom.min.js?ver=1.9.2 HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:00 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gC17prwmvQNiKWOvsZuRq06mxNA%2BPCwsLLfKLTz0ElxEGRfC0q9ozCUmS62nJwTwvJvT1ndoogWV8yT6%2Fpm0dCoHUY7VEdQFULdEeNSRBn5P1TYR20HnI%2FKK%2BuE%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\nage: 7\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d10f9aab7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64558)","md5":"ba23883b51f5f372d28755e199785526","sha1":"a4082cd3950848f2b1b6125a509a8b028f4dcf31","sha256":"f87153921ae6b43428f4cb607b862453667493c5cbf8eaded2c378c225e9a53f","sha512":"71588a059b301f6df5522e776a91673f37a6e29bc6f269420eb4b266c90313d38ada0c9477f2f4f1ed400b4c23268757619d7099712e36298dd5ddcc586ee369","ssdeep":"3072:S4qsOZ8ddulN/6l+u3kisiHIwEPWqoH0tJ3HZ0iGlSnxxdZ:4ZquVfXJOiGlSnxx","tlshash":"5634e84c7241353692efa265102f260b7233a55da606805cb43dc9ee9e7de0471bbfbe","first_seen":"2023-03-07T12:21:39Z","last_seen":"2026-06-13T00:42:43.022555Z","times_seen":248,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/jsphp/js.php?ver=1.0 HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:01 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MApo6p67ptvjY6W%2BIA70ARVKOTYIPKGOB5p%2FJ4pOIXvGfrZW4Y8qRUkA6zAYq9WGrB3ZBN6oeAhZDC0eRNSAfJR%2Bu8WYX%2BnrvFp5XUGqMBoqeHHAU852DxkAMds%3D\"}]}\r\npriority: u=2,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d10f9b2b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13843,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6a9511b4d06fb3dd39c75475b7e0c92f","sha1":"84cd9ff1dad88616c701a379f335ad4b136d93fe","sha256":"6ccb1bba7ff3e73df5dd24cece1d9aad5e3334f674000112fcb8bf0c7e4214c2","sha512":"e1cce80b8e32e4d10d95a3ceae16aef596cc348e8f5c245bc463eb88d69e2ac9b8c80bcdbf71db7e2a60e47e6d0f230f7bf1d03ecf36205da28cba25bea8fd1b","ssdeep":"96:MQnEzSYEwYE8n+6fTY0OHlqGQNaYpeWeHuXAua/uotwLaQSZCKG5EV5yWvkfoEHB:MQnhYbYbZpOHlggO5u5Sns2zb+Cns72","tlshash":"92524195b31c75ba52f33026897926a4dd2ec177c00184a1fd7d20f0bf3096da7a6ead","first_seen":"2026-03-13T16:20:25.619648Z","last_seen":"2026-03-13T16:20:25.619648Z","times_seen":1,"resource_available":true,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/uploads/pngegg-convert.io-.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/uploads/pngegg-convert.io-.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2211\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPJnyskTqB%2FI90rK35eb4H96PZKtLpsYUNmoDC%2FJnoFgLtkdDfGh3YX2jCmJ%2Be%2FiqrcU05KCX%2FEwHelJhtuz%2FNuKEZ6ITDQ9NIbFdJrgXyTSqT1slsVKkOsrlzU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d174b2fb7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 27, 8-bit/color RGBA, non-interlaced","md5":"e34fa1bec47f08085689bcdcaea4c00a","sha1":"f4e9837a4620e5e71ecc84e01bc73cf508f77de1","sha256":"dc9d9069353de03bd32265b0c4d6a749e7df4b449b22f69df3ad918e1bed52a8","sha512":"777ffea809532e4adf8ad9e2de1388084286a1e24dc327b9f9d82d18aeb8c1256f274acab1120920602a6870c3da16aef76aace08105d0dde528b6e813b9f023","ssdeep":"","tlshash":"a1412bec918598d9ef8eab13c3a32f44eff2d04553a1aa947b55cbf0526de090b95303","first_seen":"2026-02-12T21:27:37.833464Z","last_seen":"2026-03-18T15:21:36.544097Z","times_seen":11,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/images/dlogo.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/dlogo.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2197\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OgXM3K8UEeMzK7Fc9m%2FQrtDTXNR1BAtw3k5XgigQ8tVnIJDaEqqJ8PIbMJXG61gOgxN5QdRSIiyD0pRW3YXlyDrJSShV%2F0lAoQz06QsKnkjzOZJ9IuQhfZcwdGk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d173b23b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 38, 8-bit/color RGBA, non-interlaced","md5":"2b83ce1610dd486039d9b6e4906f720b","sha1":"cdf502b1fb0a6c6e0ffee3502790fe38d23a7a32","sha256":"e86f791007650d3bf94f17c849dd9dea638b558fc92d03f4a8480259fd270b76","sha512":"b9ffc3c99b7a81158acf960f7151b787ccce5595d5c426feac882b5cae63d32c2fadfed2ca4c93e94c947475be6b603bfdf47218c6c1978d8c1cfe0955184730","ssdeep":"","tlshash":"a941d70ed8914c0351ad56a04cf08923677b1c8076e1e61a7acfc68b92650fbd67fdca","first_seen":"2023-07-05T00:24:46Z","last_seen":"2026-03-18T15:21:36.55252Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1042,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/uploads/tether-usdt-logo-convert.io-.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/uploads/tether-usdt-logo-convert.io-.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1305\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLvca0fzVvlBtaYXMFkIW2bJsvs9zu5A4F1FeBjmnmbUJU03xWaMXtlVMEDHjeByNKj3XYTn06xmRR61GBkHn%2BsCHamAstVYjhJRLSGP8agpYSwINRLF7wZxRrk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d176b34b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"7435641caeea9aee71fe4798a5197352","sha1":"04aa9218ee360421caa919eacde3743d26367871","sha256":"a64e747d1cba070a2c5cf1ae79cab8c5eb47e153c00b91f0d6f5936068383151","sha512":"e5a2fc5dd2d4c477459250ed4871809180226ef70a98bf3a3a22cbe13e62532ff5fe5da84fcd211e9280b35fd7065e01a70b7d329aa917608389b78235409b21","ssdeep":"","tlshash":"8c21a3c543e06d6ac30a272253e25342ffad62371593294a6870b21edf03da4279c29d","first_seen":"2026-02-12T21:27:37.840105Z","last_seen":"2026-03-18T15:21:36.54895Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1039,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/uploads/exchange.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:02.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/uploads/exchange.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 12110\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8oG%2FZUTwQhkzUYslHAA6244B03OzWlmH%2BjChs4N04E2UhwF8dKbwvAXkKJzj623I9BnIJfU21XWPt5PXJdaU3VzaQhrsbLcncfbZBha14hK9btv4EKjO1qqlwU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d1dfc5bb7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"44fb93bfb579eb3912113b9441be365a","sha1":"777b5980f34d14e77b8a6882dc2e9ce61542f9d3","sha256":"bbb5a86554c3fc859618000e369e9b97efa07cbcc2938f7e1831d194457bcbaf","sha512":"a2109e70fb80bbc4fb6351c003dda4329adbf109fad22b94b8b18b8c9f9a00aab719b32a1a47b9cbd0e31bdb323af0705b25d2324443c3ea73d2e387d89b4018","ssdeep":"192:hpzUtjOQGd4Q5hlt/WH3MZdYngyVuN9IMWPLpgyaG2PxYIxIf51Y7cd:h1TtzvkqdAoNSMkpvaG8YIxIh1Yg","tlshash":"a942b156a364cc84969384cd87b717dbccf68e3ad421defa0d87c14a095d4ee0910dee","first_seen":"2026-02-12T21:27:37.835778Z","last_seen":"2026-03-18T15:21:36.558979Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1044,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T16:19:58.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 16:20:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://aminalbertlunju-exchange.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://aminalbertlunju-exchange.com/\u003e; rel=shortlink\r\nset-cookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A49%2Fv4%2BCTbQ2wxjHlFTIZRw7KeucKGT2Q0ORTVLpI6odiGHFR8vzzeCQS2HiLtK8YwKIACBOGC6o0B2utnfGGbqaulwaG8ZClsJxQ7ApACYvgxFkRsAaHqXoVoU%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dbc5d05aa96aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI:1.9.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":18714,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"bf96c2289a91382bf9eaa776a14594b9","sha1":"be9447ea0301e0bba2706e92fa24fb843b74bf6e","sha256":"90bb6cf4738e8d751a40412b07e84b208a107c5f7f086d26a408a4946e810a6e","sha512":"d009b5150e4f8ab028f6fc77bd87b494303be02d2a19c438baa8d7f2f791b028a9bea22eff9ee537ccc309670cbe8f64e66445f87ad5a3b114dabb399d33e536","ssdeep":"384:EKtPFPaPEPmP1dJUJj+yOT5YAve6ij6BaD9csLDlD5csLD5DhcsLDlDhcsLDyDH+:EKtPFPaPEPmP1dO0yOT5YA2TrfvLUNf4","tlshash":"ef82c8a1748da83711632a8641b4670ee1dfca3adf078856b3fd57f7abc2d00c953592","first_seen":"2026-03-13T16:20:25.623891Z","last_seen":"2026-03-13T16:20:25.623891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1702,"timings":{"blocked":84,"dns":41,"connect":8,"send":0,"wait":1528,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/plugins/exchangebox/js/jquery.form.js?ver=3.51 HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:00 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BG8plR%2BpGnw0EQWHWXOsmxggXQ62fi7ZTb1wRCAUeYH5Hm4L6KDeCkWVkBx9ZXjlTPlJFfkImFHl7SFyhZ212%2BvGKcJLB8DMMcHM76aHbhvn8hSMAeBAD8uux00%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d10f9b0b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43892,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"08a24670beb2eae7ef79a6d5ac23874b","sha1":"eca8a1978457941622833130e92b9b274e2b3a36","sha256":"3a16fd80d67008f1c947cf93ebb20e2af2ed1a6317e194d35ed15046076c4211","sha512":"3a2e9c8c3bd0a0d139fffcd0a4bf4f21b005838236868b02f345e7ca8a3431060e86f60775fbe0a009bf011d7fbe25e88aea3fed4a492330ae69b8181ad33cf7","ssdeep":"768:Kh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV5uMwMGM+zA:eiwDM1YuW+WkeBEfcPZ079SjCOoliMIj","tlshash":"e413a24a79eb12a2192334b94bef90497739d0231108dda07d4c53d0afd4db4a6fafe8","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-06-13T06:18:03.251059Z","times_seen":1347,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-includes/js/wp-embed.min.js?ver=4.4.31","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=4.4.31 HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:00 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRJ2jhPstoh%2Fb6sW7ojyaqy1TU338Kbj4aoS8wF9kpiiuuQDMfWydy2CzCfF1zU%2Bca0U9d4FELpeQSNUgpvVuj%2BS4Pwli9L85n8LIZ%2B0m1OHxYcWFWy0AG3BI5M%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\nage: 6\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d10f9b8b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1436,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1436), with no line terminators","md5":"82525747ca97f625aa0d0ffb9caefa30","sha1":"8c45e2ed1ca2b761ecc752b1cd7932b5935353b8","sha256":"46affe05997312dcd35ef3050ee666893ddd2690203ced1bff1349b1516c91c2","sha512":"db6c82e45a56ceb2b1fc079b96ed16100a491fc9bd5962e70030dc31d8cbf34b9d753fdd0e9aca01e77f3a23c7d4f90a808760d6534a40a59032773b3e267776","ssdeep":"","tlshash":"1521525a323cd43ea4d741d3bc8434cad2a21beda81204d14a78cc08f5e8f83596efd1","first_seen":"2023-05-16T22:25:04Z","last_seen":"2026-06-13T18:05:03.801023Z","times_seen":1674,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aminalbertlunju-exchange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Mar 2026 20:34:52 GMT\r\nexpires: Tue, 09 Mar 2027 20:34:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 330310\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-13T18:32:22.427337Z","times_seen":284944,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":191,"dns":1,"connect":56,"send":0,"wait":57,"receive":78,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/js/jquery-1.8.3.min.js?ver=1.8.3 HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:00 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G82km9ovnuZdFOYlx6gAUZK9i0sFBEtJ1OGJhVcBdaUizwV0ONL3Jd55q2ODvOg0gv%2FUcZ3U2ZWhuKg%2F6QW7ru7hWHA5n9jKSFZLR7mPLzDomflC0OBLTtFmT%2Fs%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\nage: 5\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d10e9a6b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65482), with CRLF line terminators","md5":"e1288116312e4728f98923c79b034b67","sha1":"8b6babff47b8a9793f37036fd1b1a3ad41d38423","sha256":"ba6eda7945ab8d7e57b34cc5a3dd292fa2e4c60a5ced79236ecf1a9e0f0c2d32","sha512":"bf28a9a446e50639a9592d7651f89511fc4e583e213f20a0dff3a44e1a7d73ceefdb6597db121c7742bde92410a27d83d92e2e86466858a19803e72a168e5656","ssdeep":"1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ","tlshash":"f793f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-06-13T14:55:27.770421Z","times_seen":21630,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C700italic%2C400%2C300%2C600%2C700\u0026subset=latin%2Ccyrillic-ext%2Ccyrillic\u0026ver=1.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Open+Sans%3A300italic%2C400italic%2C600italic%2C700italic%2C400%2C300%2C600%2C700\u0026subset=latin%2Ccyrillic-ext%2Ccyrillic\u0026ver=1.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Mar 2026 16:20:01 GMT\r\ndate: Fri, 13 Mar 2026 16:20:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46468,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f26a7ce9efdf3198522588e90722c271","sha1":"a51cf2052c4bf9775488622e223557c380cc4acc","sha256":"7023201ae131168da7538090c3bc8ba1cff47e2b3233842aff046d1814315711","sha512":"bf613ca6d1d3b2efa920368fc16431c72d7cd40e3da15ac58820eb343e8bbd6dc52280af7ecdecf5869d46764736073da8e99f6ec3e5c5eba62d9b3780fd4226","ssdeep":"384:+eO2pXt2tv/qY49Ynx8bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5H:YbPUiCAgkgHLFosL3Jbc2","tlshash":"09231c910417244066432dd233de3e30ee0fa2607044d076abfd9bdbeedad6a62b535d","first_seen":"2025-09-17T17:43:28.294801Z","last_seen":"2026-06-13T13:07:14.989733Z","times_seen":1796,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":191,"dns":1,"connect":22,"send":0,"wait":36,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/style.css?ver=1.0 HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:01 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BuorJtiqConOFktoiG%2BUq%2F3DmHmqJRcR3O30foIiL50J5BkbIzhzRB%2BlXf%2BlazZ%2FmHOJiXaBE4lKnjeCErEav5WVCMFLHVTWjDaGqjxxvsZSVNW2EcF951IOJk0%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d10e9a0b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42254,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (323), with CRLF, CR line terminators","md5":"b4d9c15397bd43b2bf906654905e5232","sha1":"f2c2dbbabccd67e0ba1ab4a1c1a0da6ac777b40b","sha256":"b82690fd6cb50de8670e05faba3ba2e708bcd22aeef20bafbfebe799dc82b7ce","sha512":"6837647ac9b557099669ec8e1c6abcf1381168e9d8b1582aaef555b7604ca73257fe11d3f8d7806b3a347daf9f9db91a11d2214ebe855c279f8490817b8c3e85","ssdeep":"768:Oqf4eZa+jEY/n/63r+SdzUCN3VDdsxdu1tevS8oLBb1tm:Oq26S3/tdsxqeKE","tlshash":"5213c628ba41306df312e4d4efbb5b56cf1d4062fa1211f4bae81130c74a86cd9b6bd9","first_seen":"2026-02-13T21:43:39.492158Z","last_seen":"2026-03-18T15:21:36.53876Z","times_seen":10,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alekseeva-exchange.com/wp-content/uploads/logovisa-e1696006951914.png","fqdn":"alekseeva-exchange.com","domain":"alekseeva-exchange.com","tld":"com"},"ip":{"addr":"104.21.58.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"alekseeva-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 14:35:39 GMT","end":"Mon, 25 May 2026 15:34:19 GMT"},"fingerprint":{"sha1":"80:A5:A2:E7:43:A0:85:25:47:3E:0C:D6:54:38:2D:AE:E8:19:2E:69","sha256":"16:E5:EB:9B:95:10:2C:3D:88:24:82:AE:0F:F9:2B:FF:D7:B1:EC:94:4A:F1:B0:46:C8:3F:BC:17:C0:8A:73:D6"}}},"request":{"raw":"GET /wp-content/uploads/logovisa-e1696006951914.png HTTP/1.1\r\nHost: alekseeva-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 16:20:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 2807\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Sep 2024 07:44:57 GMT\r\naccept-ranges: bytes\r\nage: 1200\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRkj0U4j4s5zNTYp1szNH8B3zTXcXk4WE%2F1yhXcVQFcLZh%2Ff5Q68e5cPdi0iwAuaAFCSkNds%2FerO5HMxHfjWvzOPp1moSRB5FfcU78X%2FxtM%2Fk9ASU9w%3D\"}]}\r\ncf-ray: 9dbc5d117cd6562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2807,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 26, 8-bit/color RGBA, non-interlaced","md5":"bf751d84f8f5719cbd77c7b9d12eb350","sha1":"9092fed5a33375d2a76e65bdb03d2e80d12f8ef3","sha256":"7bf1f3d1fe352c8982ad1d67b7d8d4aaf2021db785d80e628420eccbfc750235","sha512":"cb42ac52d027ebc17fd9cf3c2c5a7be2af4562f75e237da1f729943e80689500b2e751f940b24153c4ca88ccf244b02df5499005d51aec316623cffd2746c3c4","ssdeep":"","tlshash":"31514b07717a1f4890da712c5d02eeb16b3c0b84c152be8b5eb8c07ba443a4da179e78","first_seen":"2026-02-12T21:27:37.822109Z","last_seen":"2026-03-18T15:21:36.561899Z","times_seen":11,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aminalbertlunju-exchange.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Mar 2026 20:34:52 GMT\r\nexpires: Tue, 09 Mar 2027 20:34:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 330310\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-13T18:32:22.427337Z","times_seen":284944,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":197,"dns":0,"connect":57,"send":0,"wait":122,"receive":45,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/images/tel.png","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:01.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/images/tel.png HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/style.css?ver=1.0\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1248\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RArs5hZ%2Bu67LiQKOq07AB3O4RY%2BuKMi2zY07MjE70JO4iKPn%2FsliFvrwwTjpPas%2FaFDDJnvGwW3LxTqUGt%2FL56caO%2FrNYAGO09GzcOWeadn9gQjtBcdC3%2Byl240%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d173b25b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 26, 8-bit/color RGBA, non-interlaced","md5":"ce221021e9bb040489bdce9285081035","sha1":"6e41f87a25d1142471e2cc5db99096124cbc136c","sha256":"ff821416c23568b3f5cfe2d0be63eed995de1bcde4e81c2f60a822bd09a92aa7","sha512":"e20c44fe4b3a4000654ffcdd4e9a6a6c9b04f153f71969f2e53a239b2fe573713c529ee0af1dbb58b78e494df2660021c225467e0d6b2457e01d0207d6cef8bb","ssdeep":"","tlshash":"6321b749fa4444c171a9e88570f790a35e131040cae8b9adadcfc86b2a30b60c235ee7","first_seen":"2023-08-06T16:12:27Z","last_seen":"2026-03-27T23:48:45.878584Z","times_seen":21,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aminalbertlunju-exchange.com/wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0","fqdn":"aminalbertlunju-exchange.com","domain":"aminalbertlunju-exchange.com","tld":"com"},"ip":{"addr":"104.21.30.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aminalbertlunju-exchange.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 06:31:37 GMT","end":"Sun, 07 Jun 2026 06:31:36 GMT"},"fingerprint":{"sha1":"18:74:25:F7:3E:09:0C:DC:D2:B8:F9:21:49:07:76:35:5C:26:19:36","sha256":"8F:D3:F1:51:4C:9C:E3:42:2E:8A:10:77:77:D0:39:23:4E:D4:E7:1A:A4:16:1E:97:A0:CE:81:9F:CD:DD:9E:EB"}}},"request":{"raw":"GET /wp-content/themes/exchangeboxtheme2/js/all.js?ver=1.0 HTTP/1.1\r\nHost: aminalbertlunju-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nCookie: PHPSESSID=4e9b7de4485eff70b1e0eda1fc32ca1b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 16:20:00 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5s2K7JnaOBqfcd7o1UieXDpy2QjdMQw9mHdEfFKEapeGF%2BfJjX%2FOBTOxQIGPS1TuPHYjJBxEosqLIzR1rmAwdPOICelOcIw%2BopjqjwhS4rKKL9WmDkHtdH8mDM%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 04 Feb 2025 09:20:26 GMT\r\ncontent-encoding: br\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dbc5d10f9b1b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1828247e7d73542b9227a0087213e2c3","sha1":"2f00addb017da60566e3ca8314ac2213a5bdaf45","sha256":"7299291b90162227d949c4683c7f118c3ee3673455d9de62ebfae1058abe74d1","sha512":"f51307caf46b6a7d920778fa1f98d8b2ede2c0afa49703c22fd70a6dec1eed08b7e4930bc84933a8792b1f6d1b6214a53419ccf2826998e886f671960058a42c","ssdeep":"","tlshash":"ee3199817654a52c71fb30ab657f0104ae28862799020850f8bea9b12ff5356b7f2c5e","first_seen":"2025-09-03T19:06:22.190121Z","last_seen":"2026-03-27T23:48:45.873562Z","times_seen":14,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"aminalbertlunju-exchange.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alekseeva-exchange.com/wp-content/uploads/Mastercard-2019-logo.svg-e1734108004524.png","fqdn":"alekseeva-exchange.com","domain":"alekseeva-exchange.com","tld":"com"},"ip":{"addr":"104.21.58.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aminalbertlunju-exchange.com/","date":"2026-03-13T16:20:00.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"alekseeva-exchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 14:35:39 GMT","end":"Mon, 25 May 2026 15:34:19 GMT"},"fingerprint":{"sha1":"80:A5:A2:E7:43:A0:85:25:47:3E:0C:D6:54:38:2D:AE:E8:19:2E:69","sha256":"16:E5:EB:9B:95:10:2C:3D:88:24:82:AE:0F:F9:2B:FF:D7:B1:EC:94:4A:F1:B0:46:C8:3F:BC:17:C0:8A:73:D6"}}},"request":{"raw":"GET /wp-content/uploads/Mastercard-2019-logo.svg-e1734108004524.png HTTP/1.1\r\nHost: alekseeva-exchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aminalbertlunju-exchange.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 16:20:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 3006\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jan 2025 10:18:03 GMT\r\naccept-ranges: bytes\r\nage: 1200\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdOVU6pLAjTJrdaHiv1ENvdWCBpNyCb7xdaMAip%2BhPscWEuiJ3QIHixEhwx5VZb%2B9w4ZMZsM6ZGjKhrQFbx%2B4RagGXmfi6q%2FXoTBUNBRut9B%2B2Lnl4w%3D\"}]}\r\ncf-ray: 9dbc5d117cd3562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 74, 8-bit/color RGBA, non-interlaced","md5":"2d36ed51a9bc1824fa1d717e7ee19b73","sha1":"72663c51853052539e08319fafaa5cc66ae280a1","sha256":"7dada7d33f2c5d625db9608f9ef9b7c6cbeaadc493921da836e2be2091faff97","sha512":"b0a50b70a0de9eb8b027522ef394eb6849e2934b802bc954857a68ff9502047cebd47e2b5f539d985df7c7413752b7c938d8e1751ad805a859dc553dfa0915f4","ssdeep":"","tlshash":"51513abff371133e9e6561ed12af4b74376098188b7b008a494a87985b1a824e03116c","first_seen":"2026-02-12T21:27:37.841997Z","last_seen":"2026-03-18T15:21:36.55058Z","times_seen":11,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":59,"dns":31,"connect":9,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}