{"report_id":"ef216892-0395-42b9-bf48-91d6f2b446b3","version":6,"status":"done","tags":[],"date":"2026-04-22T13:17:29Z","url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"title":"CoinChanger #1 - Your Premier Crypto Exchange for Withdrawal \u0026 Transfer","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T13:17:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-22T13:17:10Z","timestamp":1776863830,"ip_dst":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":41120,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com)","source":"{\"timestamp\":\"2026-04-22T13:17:10.126651+0000\",\"flow_id\":1688896204629310,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":41120,\"dest_ip\":\"159.89.102.253\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2854306,\"rev\":2,\"signature\":\"ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_05_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_05_03\"]}},\"tls\":{\"sni\":\"geolocation-db.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"27eabd2e03c903c0e38682b67d24b578\",\"string\":\"771,49199,65281-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3372,\"start\":\"2026-04-22T13:17:10.058686+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-22T13:17:10Z","timestamp":1776863830,"ip_dst":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":41120,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI","source":"{\"timestamp\":\"2026-04-22T13:17:10.126651+0000\",\"flow_id\":1688896204629310,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":41120,\"dest_ip\":\"159.89.102.253\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2048378,\"rev\":1,\"signature\":\"ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_10_02\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_10_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_10_02\"]}},\"tls\":{\"sni\":\"geolocation-db.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"27eabd2e03c903c0e38682b67d24b578\",\"string\":\"771,49199,65281-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3372,\"start\":\"2026-04-22T13:17:10.058686+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"translate.google.com","ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-04-20T14:32:28.508056Z","alert_count":0,"request_count":2,"received_data":83404,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coinchanger.cash","ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"2023-03-27","domain_rank":0,"first_seen":"2023-03-27T12:17:45Z","last_seen":"2023-08-01T10:17:19Z","alert_count":54,"request_count":54,"received_data":1238162,"sent_data":26525,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-19T22:38:36.404513Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-04-20T11:05:03.521561Z","alert_count":0,"request_count":4,"received_data":422416,"sent_data":2173,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-04-19T23:27:37.109257Z","alert_count":0,"request_count":1,"received_data":90461,"sent_data":445,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-04-20T02:35:31.681433Z","alert_count":0,"request_count":1,"received_data":122144,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":14310,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-19T22:33:42.593215Z","alert_count":0,"request_count":3,"received_data":138896,"sent_data":1514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-04-19T22:43:20.40257Z","alert_count":0,"request_count":4,"received_data":65644,"sent_data":2113,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":5,"received_data":41873,"sent_data":2623,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba5d7499ff1d3bbccdcb95a12fad9632","sha1":"da88feb547749b009f2d403e99c93a69210803dd","sha256":"a55c27de895c26fa9cc7da64174e1c216f5bd6ff921c0c9d921b7d3cf7c6edbe","sha512":"397b1c36025f7caf7c2c5b53fbf4b7b36bb4f2a59b10e147981d378fab4751abe67a8dbfa3e99cbc575cbbb290f9cf647c384b6bc9056e16b06c399f84561bbf","ssdeep":"","tlshash":"eea022c0082c8338b2cc020cb0b80200ec2ce0f2c000c02f830ccc20c080002cfebc8e","size":79,"data":"","first_seen":"2025-10-21T18:51:26.582983Z","last_seen":"2026-04-22T13:47:26.175016Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/particles.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"e97d658dfe417ef41968b7f4e8ca526e","sha1":"8a59a62dca3e1e412660ea3e4046e1e9c64ff8e7","sha256":"9c6c3289fc39201be74c53755160affe4087df07614d3fe997605bbb57f7a499","sha512":"84958874b2f54e7173f46edc5ab88f31792718eb162e0fb682d44722d82fbab6a2d2d4b2580983eee1079332ffc62313cbe9c76bc9c210904f08a0ac50463d54","ssdeep":"384:FkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWdJb+4LCx:FC7T6uYvn8wRxwyryVOEKXWmb","tlshash":"52c2930da3f73e7723aab2e05bfdd112c77094d2259b04b0f93c667cab25452019eba4","size":26640,"data":"","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.114066Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"0798046620a7d6cfb5a1b5f8a6ba4913","sha1":"c0681df3e4fb688e4f3ff673dba6a2a04693df73","sha256":"e466a7896282f8b7215310ff3b632df77f1a33aa9323a451252f9a8070511dd8","sha512":"ad2398393699e5e555ba4f0f638f8dadd3084fa122b933b15e002a376c4184c5b5a82771cd4faaa0ee48d740c42ce08feaac833fe09e86711d1a6b16e17ed0f3","ssdeep":"","tlshash":"acd0c907b270410e24a6f20ae39a19cc7234854b19390c25369ea09b3fb3fac234d4a8","size":230,"data":"","first_seen":"2025-08-09T17:24:07.202341Z","last_seen":"2026-04-22T13:47:26.177683Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/script.js?40","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"d885fe7aa4c35d324ec3b981c14bb2e3","sha1":"2ae85a96091115eac4934743c2e13f72354a6898","sha256":"a29cd6a8d9f02e29a320146018eea111932f971ecca1343aa729008d3b10c616","sha512":"214c82d3b18e6aa390d06f08cf82bb22ab04d823c8eb6b5f952a6a8c54d750a3df280ea87d4c875428be980a52e710c87bc332cb168d862be466cc2f3fd9c847","ssdeep":"192:qnEWiWFbV3HoWqI9ym3ckjodvBho/sfKijasitibbl6oNsDKzywvNe6o1sD63W1C:qEWiWlV3HoWqCym3c8+vDo/sfvaGZ6oW","tlshash":"a32213ab3da320614babf1fa5baf4348743052032841ec45794cdae11f55d60dcbeeb9","size":10865,"data":"","first_seen":"2025-10-21T18:51:26.521288Z","last_seen":"2026-04-22T13:47:26.138386Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/jquery.easing.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb13ce6e9b41da9553d9d9266dcb6f62","sha1":"12f67e93b24b5afc87ef925a9f8564078b92df2f","sha256":"a1e8de3faba0e83cce168e1d0923034e76d4ff2e6103efb8d957ca92ea81ccdc","sha512":"45577009502a366714485fc1bc388ecad1390904165dc9e1ea750a83edac8865f67eac12b7f437eec9dd5ed3e899b92f791dd5b757025d28c67268ed35eab11f","ssdeep":"96:lUejDjbb0OrPJrFJzhOroq3w3znhG9zp4tSZCHjuwE9nCDTVpWZ:yAwOrPJrLEsq3w3r49+uwLvo","tlshash":"9ec10f8975f1761963b133f0117a201bf29dace5160e6808f8b4a9997c7b17c87bbc6c","size":5607,"data":"","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-04-22T13:47:26.113324Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca1c9c7794614431a6aba9a5e6a3519a","sha1":"675321bd81fda9ab7e4264fe89bd1d75fe162e7d","sha256":"ef09db7549b0f1a0dbb36be7053cb58502db4730ef757c165e0c242bdb4b15c1","sha512":"865eb0a083cbd6c2285c78c40954eb77731b7838b42ff9832e6e56e6dcb2a32c042abaf685b533a075e9ab09570141181dcaac753b17067ec9a54e9e32f91401","ssdeep":"","tlshash":"3531cb5b71cb12b819df542f2beb568c36b080071949c600bc7ca569af70eb422fe7e4","size":1793,"data":"","first_seen":"2025-08-09T17:24:07.204191Z","last_seen":"2026-04-22T13:47:26.178493Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/ms-Dropdown-master/dist/js/dd.min.js?ver=4.0","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d164a9dc6935af784c028dc3a73dd5f","sha1":"ded9a1d10e40c00f67b128132288347eb9cd19a4","sha256":"2fc23eaad51d463b4f98676ee3c6b8a69cf6b84c980eb1f8e597183f0052ce57","sha512":"fc1a30b1c5dfe01d0e51643de109ebd056407738e2e79206eb99773cbdc379d2ed7eccc2b71dfd5886cc510ab5c7a647aa77e961bc6629f71de3c2c93a48992c","ssdeep":"768:f4Bn+Cc8s3y+ugJ/hlNlll+LL+ZhxgusjR:NuQZlNT+DR","tlshash":"64d2a8122365752602fe90aba4f84543e37976dd5d0042acf5a8ecdf638ec40b2b7bb5","size":29823,"data":"","first_seen":"2023-05-30T19:57:02Z","last_seen":"2026-04-22T13:47:26.169062Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#215","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-04-22T17:18:40.79876Z","times_seen":29950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T17:03:20.430081Z","times_seen":225772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/bootstrap.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb0e635db142b1b9fce20fe2370ec6cc","sha1":"c5c481ca5a263031d938f6c12abd2fe5fb4b6a83","sha256":"5a4a5359110a773bd154da94c48ffd6a6233a29dfd5a9314555f5ae6c3e47459","sha512":"ddcff973930485feaef0476731caf0d210e4e9be47c6271fe5a9175a885f27509558b1ef1be42e791e0398d7d109bad33c3a912b11653c3290825bc0c7871411","ssdeep":"768:9UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXfl/8Gf3ZTbQ:m/76whqKGvl33ZXQ","tlshash":"9af29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","size":36874,"data":"","first_seen":"2023-03-07T01:15:27Z","last_seen":"2026-04-22T17:34:28.543652Z","times_seen":1713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/jquery.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e8b7d96265599258e88bff700adff2a","sha1":"1a4d3936393fd3ec3470dbea7d428e053e07cef6","sha256":"3ae5d8b5a2806b811378107313b19f0b05baae4b2bbe85e19e9cd223391a0fe3","sha512":"308beaab22ca98974f663ede9320197e9c9072aba6a9a4f7763dfe76bb019b7c7aff5f6885a9ad007d4af262d4ba622ee84f571125752b75198d83df1ab5ea26","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp9P:y4J+03jL5TCOauTwDhFdnCVQNLa98HrF","tlshash":"5d93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97166,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-04-22T16:34:43.626035Z","times_seen":1971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geolocation-db.com/jsonp/?callback=callback\u0026_=1776863829780","fqdn":"geolocation-db.com","domain":"geolocation-db.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32bfc38680bb4bf39924c8b97056142e","sha1":"4a6d4a44b1772ca38252238c8ee1bc5a00f37655","sha256":"a0d62ff78462dc03d9a4a0561d450128c532f3670825e48567bf0ad490bac179","sha512":"521e1b515baf50d5bbbdef69a9c9ed86dc777553cb1d39a48290bcc663c41d53176c7f660a8e1dca6f3a0f612f022597e2ec9284a01fee75d375455922f03530","ssdeep":"","tlshash":"c7c0801f205c4f0fdc7bc3c9911f530301291108c64e52c70ed2dba1c2cebac214c410","size":167,"data":"","first_seen":"2023-03-07T12:06:33Z","last_seen":"2026-04-22T13:47:26.175952Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"75a222fd3a864a7fc98cd7fcdb318e73","sha1":"525211f9a51a5ad153d1ff5c8af561f402b89d23","sha256":"ca40e897c4ec0764980b8612903f628cfe61787d81188abc065662c7bd72f50b","sha512":"2c992764dc3521275f316606e4f9fdc00301e0b5bde618b637ee1fd373debaec795fcca0775ac4710d2f50f058b29bbf1a0a7f211a8d63333cec3cbfd731af81","ssdeep":"","tlshash":"65c09b9c224b5db155df3b514b1fb645b155315194a11c31091563449521d176758c54","size":142,"data":"","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.179403Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/custom.js?ver=3.7.5","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eb33cfa5632e32fe19af2d9e1e8d00c","sha1":"e064ac7f9e4d8ce9d3f985c68e646159885ab51b","sha256":"ef40e5c3c95fca50d11ea6f8743c8e749826f2c84a671fb1cfcc1c04bbeda35b","sha512":"34108d63a9f60fe92f3ab6ff1b161e321589217e1f63563931e9ff0b779537ce2e13dfb7b8d4bf6c76a055418e56ca5194ab703723a11a563a5eb59837a1d3b3","ssdeep":"192:zeF5yJpa6JSbop5YKl9CT1a3YfhP3VUeerpOQcfqWUhhfkdUEEfkwURaf+5YZ5EB:lBX59x3YRueTY1GySKpE2Dhd+","tlshash":"14c27284b128217b92f2177575fb0501ef7c896386124160f9bdccf8af709a43a6ee5d","size":25994,"data":"","first_seen":"2025-10-21T18:51:26.555561Z","last_seen":"2026-04-22T13:47:26.135806Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=BBA4/d=1/rs=AN8SPfrvWxNtaBTz3Cqj0GGAYEmdZ0Lg_Q/m=el_conf","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8919f1d279de9963f6b4b371b1c75c5f","sha1":"587bf8f33a8dc2111aca4da66b95ca3097108694","sha256":"4b02b53222922fccb3ca167a3ddb0783205562ee7f6361eb58c8552cdb7f0217","sha512":"dc681aba0b8c0c958cdc8f31dc1541cd2fe88cba7fac4a0136973665aaecc9a5dffcef187d3d751506d3f5206f1a3e8167a1d77a69a77cf180a9acf1ae1da94a","ssdeep":"1536:XNzri7CtoSq2LILZLUGtYirKrhm3oQQ4CuPKucbRrWKiBwNWmF:X9tILcirKrhQCKKicF","tlshash":"0c83c8c8b6a674a59353b5b5513f000eb23f589df8084dacb288d8f2adb5948413bf7d","size":80955,"data":"","first_seen":"2026-04-22T13:14:20.160991Z","last_seen":"2026-04-22T13:54:19.799426Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"93532513c76b4181e05c3c74e7e5adc4","sha1":"c212a87743e2500cf1649148d9230d727b4b0e94","sha256":"c3f968f6d19ea5bf9bdc022ba853144e1a8e70eed1aec99d92d55e3f253da8bb","sha512":"5089a4ba9e385da28bc5fb36062ed0c5305e30e903d37482155f165d61aec19d85e0aab271d55e8ebc72993ce1f1c34e321eea135a5c87c6ec61b5b79a63c00e","ssdeep":"96:voHITFZiQvSnHUJB14N3PYLQcrfdterb9tM0keN81a1vB3i:voH4SQ6H21kYXcXkeNDB3i","tlshash":"c891754d75911569b43b726abbaf2214787020875004fe09b7cccf605fc0e59e8b62ea","size":4511,"data":"","first_seen":"2025-08-09T17:24:07.209942Z","last_seen":"2026-04-22T13:47:26.180232Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"353100ef810711714439068d546957e7","sha1":"79601be9757fc7a05c5fc514fa3c5baedee6f0f3","sha256":"f77141d7cd0db7914b88363a18a7e01fc7395be0ac99ccf399056c953f1a12f7","sha512":"75d0bfd5253d83178f6fe34c85f26ee2eecc3d9e488d9b25edf87ef01784d19248046bfc7400849cc7576603ab3dd618e6cd06a7feaad4dbc07a248870aa9c5e","ssdeep":"","tlshash":"10e07d2bb9750831072bf074224bd240353ac4135d54e44a7b0843050fa0b6498b1342","size":305,"data":"","first_seen":"2025-08-09T17:24:07.214842Z","last_seen":"2026-04-22T13:47:26.181234Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/myhtmlselect.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"130ee9ec246a842c524e658837ac52bb","sha1":"cf032d2d1037b9b2558bb79d24494479ffa94232","sha256":"6fb7bb0365c2e73ec5fe7ac9db5789e8ac42704a6aca8469c4e806bdcdbf8132","sha512":"aac3a1f597486fdf3eacdcea86466064ab74368587724bbea3e95b43a02a4342890232a33597666aec2aae9f53864f2d66ec462d1c4fdee1e463ec61c650d3a7","ssdeep":"192:hnNHTaB4fQch8dzIyxITdShhpmCK16nDkoES45RDLUXLB:ZNHGGXhi1xIkhlg6nYoESyRDAXN","tlshash":"4fa23f04611a1276a0bb23e74ea664c8e275c73b510aca92356e47d90f75c80e2f7bdf","size":21622,"data":"","first_seen":"2025-10-21T18:51:26.454251Z","last_seen":"2026-04-22T13:47:26.087931Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd3e5e88f56e2223d9ef3dc30817863f","sha1":"080ad8c078433403b83c284a02d2e95c22ec7ba6","sha256":"4be943c66cdfd8c2fa8c3570f14629e556bfa6e01afc413275d0440e3be97ddf","sha512":"8fa361b5ec195581ab7b7a2d52be9901fba9da0939063c36878180193414e26ff1bc86231176ffb68c31dde5b90a91ee7def81ac5ef7dfc00826de6b7a13670b","ssdeep":"3072:XJNmEj9es4bkvJ3NnvRx3kSzACvVcUJjNMByu3NFpFH4dzr+FnbTGssAEElTsF:ZrI0JSXYdzknbTGjn","tlshash":"4494e9d9b26274629266fca0a47f00c7b53dac57a4884c6cb249dcd62df090952b3f7f","size":419116,"data":"","first_seen":"2026-04-21T18:59:47.631327Z","last_seen":"2026-04-22T18:04:59.557639Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/waypoints.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe14337a62d710389f42e8a5d1043f7","sha1":"5f3e0f34b6d7460c5f160db4fe568cde29f3ffa5","sha256":"069b3ff0c0e6c33e08368f94906ae49ec76ab1ed570819c768148ced15b138bf","sha512":"1640c47e1fec258203fdc02be6722ecb46f941bc9deace00cd4efb9a90203c09562cb43b7284d7dd9b4a4d3975a96130d0c214d73de567d8f88487487d88491f","ssdeep":"96:fdBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:f5G3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"94f1fac9b4c7b4221befa0b5d43f060bb33a9d4561098068f194e4da3db4a6da567f38","size":8051,"data":"","first_seen":"2023-03-07T01:41:57Z","last_seen":"2026-04-22T16:13:05.081683Z","times_seen":5710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/jquery.counterup.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0e0b047f2ed8512d5119b31432bdcf","sha1":"15c6242be4251b23c8aec6dd4620b95c37c53d22","sha256":"3145a2ee536ea38dbcb2563fe7dad866ca2bceff859249e069cf33224f43b7cd","sha512":"3af8b27ceebcd996492f07b6d972723db8c1062296ea7d1abf0bdccc6661ffe17e8a71ab169b1032cec7edffe2f673d5bfc30df0abaa4e9a0809b0ff88c0ff56","ssdeep":"","tlshash":"1c118cb97a0a298dba90e41df2efb0989176bebc0c80985b51c558401f95ebc3f5b730","size":1074,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-22T15:17:07.591252Z","times_seen":3923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"5971b952619a84431f49775ac35e50d7","sha1":"6c2428522c0ede8d91da4bcf96bf50fa462ff111","sha256":"1be9937af430556bed7922c2513de08436c2f82b8e0f7163c8cf2abdfcd6e9d3","sha512":"59ae4fc0d197030b4a458336b35d47d4710ef3e8476faa5b5ca663d46843cd5de829462a8bb40df8bd8d75fb49207f5956a4824b5d3328baaedf2e6fc5b2a7a8","ssdeep":"","tlshash":"e4b0124d3891154107a23870b9cb50200122437201c44254792c41819f31978073df20","size":96,"data":"","first_seen":"2025-08-09T17:24:07.216596Z","last_seen":"2026-04-22T13:47:26.182328Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/countrylist.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8737b98b5913a4f2afe25f4c8f5b5559","sha1":"c788716b1405b8acdb74718c4aaa5f6bbb83159c","sha256":"116e363b4e8a6d01998a4787b3d3117e93a44b8f5f74bf81ba591ee333294fd9","sha512":"2f706b82fabd6a9128928ab1edc19e6b262eff96a6e37e18a3ee7556b3f733c7fecdb74d0dc8f545554dcd53b063d234f2912c24fa81542f7382a5097175a613","ssdeep":"384:umdmR/KKUYz8957pYQUnP/fzh2cys4DN/JyTbD/0:bdmpKKbzM57po/fYcY2A","tlshash":"25538d7bceec4cd555588562806eea87302083138eea7c5d73acc94d5faf80e67b419e","size":64746,"data":"","first_seen":"2025-08-09T17:24:07.147306Z","last_seen":"2026-04-22T13:47:26.126831Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"e9718e9c4812507cd3db2b82f6518dee","sha1":"7399af0d3cc7bc7713b82399c541012a62b93967","sha256":"96d7e7a5f397d8cf39e3fbe0ce76d7cbab52e365d03d4f20392f03b39bc7c7a5","sha512":"08402b3f6be03e20198617653985794680b78afee13099961cb4f15ab86b5a136bfa4ca5daf105d8c61b2db7293461290f3dc2ddf9d1532e8c26d7b1a73c8554","ssdeep":"","tlshash":"a3f0dcb34135a419d2528730e6c1a93ef283950496597ca5332810b6f2c824a808faa8","size":470,"data":"","first_seen":"2026-04-21T20:01:40.454893Z","last_seen":"2026-04-22T18:04:59.573291Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"18f81894edf7060469ee06b02fe87b0c","sha1":"dae81c5b40fcbce0f11547ed5557f09660c97ea6","sha256":"82b81e50af7fd7bf987f2a4ab3a15cfb8ae09dcfa303d2dcbb6498d17633f191","sha512":"2e4df1a88decc6614b31bcf52651fda04893968115e715682a0bac62de17d3cfddc0f1504ab8d9a08c07bcc43968a7790578ad554a7eaa7574ac17628d0d8ea0","ssdeep":"","tlshash":"c2f0dcb34135a419d2428730e6c1a93ee283950496697ca5332810a6f2c834a808faa8","size":470,"data":"","first_seen":"2026-04-21T20:18:24.05129Z","last_seen":"2026-04-22T17:42:11.821032Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"16b92895447096e36f4aa6de07329eb2","sha1":"a575359b2ca259d5b9612b29d387da7ff912fd94","sha256":"6ca2b809a53949cb5a5261dd68c41c141236c928fe91a5db6ee108e87ddbbb01","sha512":"a7c66db84537e39caa24e496c4fb43bd1bbf0266989e86c4f5d016019dc73f29783e8b2e8d3fedfdec0eaa2b5ecda3b58da768c1a9bfc4b0fb39cce40eb03494","ssdeep":"","tlshash":"4b51fc61606ca01b9513d5d1f4a23eeef0de0058c77568e07e1c29cfebda9b70497169","size":3011,"data":"","first_seen":"2026-04-22T08:33:51.582826Z","last_seen":"2026-04-22T13:47:26.183345Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"coinchanger.cash/js/jquery.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/jquery.js HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 20:40:32 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97166,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"0e8b7d96265599258e88bff700adff2a","sha1":"1a4d3936393fd3ec3470dbea7d428e053e07cef6","sha256":"3ae5d8b5a2806b811378107313b19f0b05baae4b2bbe85e19e9cd223391a0fe3","sha512":"308beaab22ca98974f663ede9320197e9c9072aba6a9a4f7763dfe76bb019b7c7aff5f6885a9ad007d4af262d4ba622ee84f571125752b75198d83df1ab5ea26","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp9P:y4J+03jL5TCOauTwDhFdnCVQNLa98HrF","tlshash":"5d93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-04-22T16:34:43.626035Z","times_seen":1971,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":299,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:17:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"ec3bb52a00e176a7181d454dffaea219\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 02/25/2025 23:55:13\r\ncdn-proxyver: 1.19\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3d6d3e43a53f02c8432187205f960146\r\ncdn-cache: HIT\r\nserver: cloudflare\r\nage: 5292646\r\ncf-cache-status: HIT\r\ncf-ray: 9f04e8337fd60b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121200,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-22T17:13:30.330739Z","times_seen":59366,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":3,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/css/first.css","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /css/first.css HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 10:36:36 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154196,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"193c4a5c5abf5ece1804847759def1af","sha1":"a10ec58735b1ab06093355da596cdcdbe91ff94c","sha256":"98c17cbae31afee76e7da82c7b920e2e04ce85d3cf9b3bcf0e17f09ea31d42e3","sha512":"66e72cd43e2c67fbc4de0682bb6a3049a53285f1a4bb9dba093fcee4ae0aaddc376e2878e3ae1a1e466a8facfc39e457234922dd9553f47583790271440fa1d8","ssdeep":"1536:Dw/o1BIuiHlqLmN8lDbNmPbzwlrniSUf2l7f9va5:vRiTzwFiS22l7po","tlshash":"40e3a7b0e10831d63333c54fbbd0fa592269f226d5564eb6f11f299c4ec528a16a3f2d","first_seen":"2025-10-21T18:51:26.495349Z","last_seen":"2026-04-22T13:47:26.120113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":322,"dns":1,"connect":170,"send":0,"wait":340,"receive":5,"ssl":176},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/content/CoinchangerLogoBelow.jpg","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/content/CoinchangerLogoBelow.jpg HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 63946\r\nConnection: keep-alive\r\nLast-Modified: Fri, 17 Feb 2023 07:07:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63946,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 533x400, components 3","md5":"e2ce3af0f0496a27f2b928233920ae47","sha1":"acded513080abf1fd8169869dbc1099eae7c06ed","sha256":"4198306aff2f4f99627e4dd658bbfcc1a16f723baa61e54eadcc8ccfa22d6443","sha512":"3335afb4770c39496b83157e28c56b4c6c8103f7c257e42ed1d940ab08e1bc7cde1678d13f0370f1d085ae920baa65769ed5d0a6754a19b2c3ae2c23c846ed9c","ssdeep":"1536:Gwt50qOMU7Crsm8LCWqJ+rQCYsOpashig0aqwF93Dp3:lL0OUW412bErpY5ajgpF93Dp3","tlshash":"2253f11d51a4cb2de207833829030bd4fb1b5a74f9ac96d5340a2557dfba9f02d6e28f","first_seen":"2025-08-09T17:24:07.19733Z","last_seen":"2026-04-22T13:47:26.118485Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":1018,"dns":0,"connect":0,"send":0,"wait":169,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:300,300i,400,400i,500,500i,600,600i,700,700i,800,800i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Poppins:300,300i,400,400i,500,500i,600,600i,700,700i,800,800i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 13:17:09 GMT\r\ndate: Wed, 22 Apr 2026 13:17:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13644,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1d0f49424c524022c5b6206f4f7e73f4","sha1":"8eaa1694bebbe92b0560a5d8da8a80872b28e9db","sha256":"7d218005b91ab951e323c75e65b8a72924439e2589dc408e4f170879d92a0dac","sha512":"e1cc7ec86772da86fbf4ba75056dea24eb6f2d57bf17e9201c361cade05c66a25d48f010552e96a7550193ebf8a4c087310fdde697d41a71da533513b0dfb1b6","ssdeep":"192:Hl6zl6mol6bkRkmoknP6AP6roP6426g26Lo26Yp6Fp6Eop6dI65I6ooI6kjH/dCU:HAE42YsNB10A0Wq2rvA","tlshash":"6e528aa2083ae11867871cc122cf7c36ef4ea254b444a974abfe1cdcada7c65437172d","first_seen":"2025-09-21T14:23:49.195915Z","last_seen":"2026-04-22T13:47:26.120871Z","times_seen":38,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinchanger.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:17:09 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 77160\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e5f-12d68\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 65317\r\nexpires: Mon, 12 Apr 2027 13:17:09 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRLhlVAWtNuxz%2B8lYcSdLRpemstdN3ctEimPgT60eMZ%2FQ2DO7lb0jCiMsnXja%2F302NK2MfmZJwJhOmrDg%2BFyxM66Y4U2LqHS5nddwjPtcUyAu2spte9gx3GU8JjR6bPI8uJCPBPz\"}]}\r\ncf-ray: 9f04e83879e8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-22T17:07:58.208143Z","times_seen":434940,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/4f4e48a.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/4f4e48a.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1710\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:25:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9e4aa0dfd61d0f7a56afc8dd3a432761","sha1":"9bc5c95ace5f507de99f24c582396fd009964833","sha256":"87b70401a83898ce7fee644dca6723fb39ee6edad743020e823c0ae9bcb21d2f","sha512":"c73b7630091939226d5c6165beaac3b938c6581fe8cdcf48659440eb00e204b762e8da710dd49f8c9de052db1836adc32f5c26aa9b14ccc81b951c39c71791e0","ssdeep":"","tlshash":"fe313de3beb14c267ec47f113ad102133cf4f44c66ce1265ca067a2781d92b2539a653","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.101696Z","times_seen":9,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/64ee7b7.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/64ee7b7.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1440\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:26:32 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a322f914e73a6ffa5cecd41057dccbce","sha1":"3929b9b1aac84b72d7673e1eca90c739266bccd2","sha256":"2702ed65bb566f10e1ee2f696423ab383d0bcfe4e40e6944b4761f0739975deb","sha512":"37402b51ad8eacae992aae7c4e09b4dde864255145a42cde0b69ff778990892c15f880552034c1eb57bf553c54de03b9da8f7c1e0c33588c913ea727f32c0599","ssdeep":"","tlshash":"8521c6c9d92184bfc13e3a9a6189eb40c35b4d721128d6b55558c2d1bb11a7efd7012a","first_seen":"2025-03-08T00:24:49.772785Z","last_seen":"2026-04-22T13:47:26.17023Z","times_seen":5,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/ripple.PNG","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/ripple.PNG HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 10810\r\nConnection: keep-alive\r\nLast-Modified: Sat, 13 Jan 2024 13:19:07 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"62c2ae4145e74d906c982ce67f2fc6b7","sha1":"b0aa210d6d950b57872b9cf7acd1d4989f1cb423","sha256":"c8d50ca21aaee6f7d8fc85ea270b91170c24a95164d201de45cbd798fc0fcf5f","sha512":"66fc9235227768f5dc995ddfaa6efc4d8c01dcefb00955dc73d367245d6c80da4ec23efe1873c86eddfdec0312eed347337eb85f7bedbbe5f7d3f652e6310555","ssdeep":"192:r8vTnz4LCXVxa8AgTE1A5gCQ7tyAoeVkTOS7S/kZBae+LUywl:8nz4mK8xE1lCQY3JusDa5LUL","tlshash":"eb22a0b6ad3435d6381ca93635e2390c9d73038b4980aac170fc8c56df50b561c972df","first_seen":"2025-08-09T17:24:07.085925Z","last_seen":"2026-04-22T13:47:26.131336Z","times_seen":4,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":260,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/CashApp.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/CashApp.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 20313\r\nConnection: keep-alive\r\nLast-Modified: Sat, 06 Jan 2024 23:14:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20313,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 139, 8-bit/color RGBA, non-interlaced","md5":"4f5af8624fed5f9f6b4496e19f2f9b37","sha1":"7109b95ec400450dba293fd9028d0ccaf42c315d","sha256":"87cca220b9425eb624e892acfad667f2e140b8053637429e9be4c41b4fc42738","sha512":"90da58ac19d57e29bf60f409bb5dfe3df2f0285b2b5c44aaba805579fb941fc5ba06a97fe53e738b00c2c6d23f45fec514192d73c986d44620570c5a0ee174e5","ssdeep":"384:ngpQLWqRMH8wQeYhvd6yD8AT2jTWqQZW//LiUV8Ig0gjX39fRefLqe3i9S0:rWPzQRFXDjTMga/mUV8I3gj39Af2OiE0","tlshash":"ad92d1f206bed720323e8975b1a141215edcdddc748d3808ad4e5fb6f9199b438c7a52","first_seen":"2025-08-09T17:24:07.102991Z","last_seen":"2026-04-22T13:47:26.094558Z","times_seen":4,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":500,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 18:30:38 GMT\r\nexpires: Wed, 21 Apr 2027 18:30:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 67592\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-04-22T17:18:40.755191Z","times_seen":1480,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/content/CoinchangerLogoAbove.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/content/CoinchangerLogoAbove.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 8275\r\nConnection: keep-alive\r\nLast-Modified: Fri, 17 Feb 2023 07:06:46 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8275,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 140, 8-bit/color RGBA, non-interlaced","md5":"adfc12d3dd2b9e27cf3b429dc0713a88","sha1":"50d0214b8fbbb5c88aad5cd7a94d09a10873c5e4","sha256":"c325d36a94487966c6e14f6582ee731c2b9d93d7c2354bce5210561b2ac087f6","sha512":"ef04daa74e0e9df07de337a091fa10da65e221b08958c45ecc81e5d176cc14657c8e64500e9744ef712131da9807d14547ac2e8894e0b070f366ac024c4c056d","ssdeep":"192:rE1OCQXRiMlb+eAYuAcrlZpnSTaXbuBUhbe/sJ:weXbHmAcrlZhaYbD","tlshash":"2002af9c0bbaecccc6b0517fb60c895b111a21bf15f6ee426f4e1a1c82e8d8a05783c4","first_seen":"2025-08-09T17:24:07.127714Z","last_seen":"2026-04-22T13:47:26.174217Z","times_seen":4,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":662,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/posts/small/2023/01/7e0ec10.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/posts/small/2023/01/7e0ec10.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 11573\r\nConnection: keep-alive\r\nLast-Modified: Sat, 14 Jan 2023 01:13:22 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 234, 8-bit/color RGB, non-interlaced","md5":"dcbe80f6e0a70e30ab3872d9dcc55c9f","sha1":"65df389f279a8de7320f45870f0d30a48f6e25a0","sha256":"5756e0a8d442b08779d7d95afd47091e39fb09beb90e02faddfdbe883c9261b4","sha512":"c020144374e2d9ecf5630361de41cfd7ce3448ce699f60cdaee1b1c7f154c9aa275f206d4dbb8377ae3d3c85944457b0cb01ebe972876f818ffd7d300312c842","ssdeep":"192:3y/rr3Ozonp7c94brz+gpw9LjOEmacUbgziRWJGxjlwPSX9prReMz4vDa:3y/33Q4hcebrzGOEh1kzYWkh/r84b","tlshash":"9b32afc036f0afd426a1ad4aa3bdac8d5a8f061159dc305e7b44383a515bf7c75c680f","first_seen":"2025-08-09T17:24:07.119215Z","last_seen":"2026-04-22T13:47:26.128304Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":843,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 18:30:38 GMT\r\nexpires: Wed, 21 Apr 2027 18:30:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 67591\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-04-22T17:18:40.755191Z","times_seen":1480,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":105,"dns":1,"connect":21,"send":0,"wait":22,"receive":1,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/0e8756b.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/0e8756b.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1004\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:29:44 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a97c8caaba85e311e1a503e8d46f2e53","sha1":"a0285dfa1e3309661d07184abb865aab02e7d2c4","sha256":"e5e2674f67986682ceab9e5bee5e674cb7ecd3f1f6807f4803a62054620548a6","sha512":"44d0c186924cf675531545706f7d6715f75d3f130710445c64f4b75e46eb4e5094bdbaf852e29589e970d205b015b5d8ef917116e55abe695983e6b9d4e05dfb","ssdeep":"","tlshash":"1411a8524a304157bad95447c428a534c4290cacb81b541c775555f7616a3bd3ca4327","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.171343Z","times_seen":8,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/dogecoin.PNG","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/dogecoin.PNG HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 9944\r\nConnection: keep-alive\r\nLast-Modified: Sat, 13 Jan 2024 13:28:43 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ca61a57df685a26ac52e5a8799049f4f","sha1":"54a3bb3aac4c31acbce932a8d9ca6ba185aef111","sha256":"06d08cd45321515641726f8ee0fc43e346c86e3d5eee4ebbb2e89afd21cd2da3","sha512":"57529940d123bac11a0832791f68f08e25e2ca02091c4411c46035f29df405172e11de9d7ee5e0c160dfd6d868018a9a32d1da9d64597eb3e9e4c00f03743021","ssdeep":"192:mAj95VG4qshK8ygWoBJknhNJOSeYy+6SDw:jd7/DPW1xey6SM","tlshash":"8c228d299ef4a1c0918caebb36c8180c6a33186b95c2ec4570cd9a531f709d4bcdb3d7","first_seen":"2025-08-09T17:24:07.18115Z","last_seen":"2026-04-22T13:47:26.119412Z","times_seen":4,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/PerfectMoney.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/PerfectMoney.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 39527\r\nConnection: keep-alive\r\nLast-Modified: Mon, 13 Nov 2023 19:16:03 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"7c42a5c8fcbcba8cad8d7543fa02d672","sha1":"429386128cd179f6d016ec04e01243801e6f5281","sha256":"22565343e30938514476f4d6f748906b0993fb6ec7556e3f60c0804d014aad56","sha512":"2b0960551e898a79c46e4cc0a7f59ce8a55a979ad49b3c56b60057d149dbed5ef9824cddef55a3b4d82f105f123377323edc5d024e683a0a6d4d3181286a1b1f","ssdeep":"768:G5XZCpXSX4utypSKwGaa5ARgPjOsdRwq7o7zDQ2CcA8FmpgB:GSpiIu0pSPda5/j5RizHC/8Fci","tlshash":"f20302b0b2ff86892c5c0423d72a526bc49bb93d2e9c619dc1b1cf6952727391a17417","first_seen":"2025-08-09T17:24:07.190436Z","last_seen":"2026-04-22T13:47:26.137506Z","times_seen":4,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":394,"dns":0,"connect":0,"send":0,"wait":171,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Wed, 22 Apr 2026 13:17:10 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-04-22T17:18:40.737465Z","times_seen":67240,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":62,"dns":5,"connect":8,"send":0,"wait":17,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/particles.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/particles.min.js HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 20:46:20 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26640,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23002), with CRLF line terminators","md5":"e97d658dfe417ef41968b7f4e8ca526e","sha1":"8a59a62dca3e1e412660ea3e4046e1e9c64ff8e7","sha256":"9c6c3289fc39201be74c53755160affe4087df07614d3fe997605bbb57f7a499","sha512":"84958874b2f54e7173f46edc5ab88f31792718eb162e0fb682d44722d82fbab6a2d2d4b2580983eee1079332ffc62313cbe9c76bc9c210904f08a0ac50463d54","ssdeep":"384:FkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWdJb+4LCx:FC7T6uYvn8wRxwyryVOEKXWmb","tlshash":"52c2930da3f73e7723aab2e05bfdd112c77094d2259b04b0f93c667cab25452019eba4","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.114066Z","times_seen":7,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":638,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/d67480d.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/d67480d.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 7610\r\nConnection: keep-alive\r\nLast-Modified: Wed, 08 Nov 2023 17:18:35 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"58bed732d150f46fd9b851ed610d3624","sha1":"9057cafd66c2a12e4a110df52de87126b6a849cb","sha256":"e2eda011781d468fec9997e6ba26924a94b0a637303c9b106e95e9bec0a2f4c8","sha512":"b69ac06447259b7b3c75050be0f8c9f118478cc9cd44e3c9ec5518ea95119c1b73b733284613cf280537ff375f355133f838780d462d7ef8e8af659cd73868ca","ssdeep":"96:xLW7Cg4Kbc9A5RpbOWeQl8cpJRNR/kcZ3b15at268rHiZm8UpAmV:dW7z5b6A57bteQuc9k0EmIUpD","tlshash":"25f14c271eb431c1645c9ef37ae10409852364e7c6d39e56b9ce8a561f203ca198b2df","first_seen":"2025-08-09T17:24:07.135633Z","last_seen":"2026-04-22T13:47:26.130568Z","times_seen":4,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/jquery.counterup.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/jquery.counterup.min.js HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 20:44:48 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1074,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (917), with CRLF line terminators","md5":"4f0e0b047f2ed8512d5119b31432bdcf","sha1":"15c6242be4251b23c8aec6dd4620b95c37c53d22","sha256":"3145a2ee536ea38dbcb2563fe7dad866ca2bceff859249e069cf33224f43b7cd","sha512":"3af8b27ceebcd996492f07b6d972723db8c1062296ea7d1abf0bdccc6661ffe17e8a71ab169b1032cec7edffe2f673d5bfc30df0abaa4e9a0809b0ff88c0ff56","ssdeep":"","tlshash":"1c118cb97a0a298dba90e41df2efb0989176bebc0c80985b51c558401f95ebc3f5b730","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-22T15:17:07.591252Z","times_seen":3923,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/posts/small/2023/Bitcoin%20Prediction%202024.jpeg","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/posts/small/2023/Bitcoin%20Prediction%202024.jpeg HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 33724\r\nConnection: keep-alive\r\nLast-Modified: Fri, 08 Nov 2024 17:30:05 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33724,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=GIMP 2.10.22, datetime=2024:11:08 17:29:53], progressive, precision 8, 270x234, components 3","md5":"b7921e7e7bb138cc04b1baaf222b5c8c","sha1":"134dd1966cb6ca43d7c4819a689e96d79ace7b84","sha256":"50548a1a5a745b607ef3af73e2840efe4e84c7c4a575129ec86395234910d329","sha512":"e48524a100bcc93a4e3a622a677d7e1c2820bb54e1ce8b80d60d8b2b16d54986023c0e44fbbabf03732d6d397276c930a344b2706df0cc52553773c484d7a087","ssdeep":"768:d42xSvpGk7DPubNDrvzDtSwQF/eZxaqnIdO9I:d42xQcmruhrUw0eZxUO9I","tlshash":"75e2d05393140e43d5a441f222634f1bbaab7e5665865573f08dc80affb08f9a48cedd","first_seen":"2025-10-21T18:51:26.504783Z","last_seen":"2026-04-22T13:47:26.11048Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":847,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinchanger.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 14:26:24 GMT\r\nexpires: Mon, 19 Apr 2027 14:26:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 255045\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-22T17:07:58.318084Z","times_seen":309555,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinchanger.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 02:00:42 GMT\r\nexpires: Sun, 18 Apr 2027 02:00:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 386187\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-22T17:10:15.982064Z","times_seen":215688,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/0b55362.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/0b55362.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1191\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:31:30 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"97f53e02ff1a1e2464ec99c487c82061","sha1":"99e3960f5c844d37d32bdf1540df013134fe57d8","sha256":"c5c28fe60682b16618efccb13af640abc191c35af508f3d1650bc69bbb4c700d","sha512":"3dbf5f42bfaac4c0930470ac0e7bc629bfd827c1440179a72c8c2c3694db4183f860cc77180fb884bce2365f019f5b28e8e3151a239f7fa1efb00674c061ef07","ssdeep":"","tlshash":"ab21da6d1b91e0c46f4cd096d65e49dd924084b5cf759227860b661a447cc1cf170158","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.116676Z","times_seen":8,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/ac69d04.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/ac69d04.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 1076\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:30:40 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"faf3bbca349928defd94e353af043ac2","sha1":"1a99aca9a831b897d37e2524d3308b7c5358852e","sha256":"98288088f93205dab6eb39c3c566ca6c90898ab2f6f6271ac5d90a09deb3340d","sha512":"180c5b420505e1ce2eddda6e96fc2486b6d72fb1ac22c6dae434537f1a8f8b30e8e9a6d69ab3dc22a6ba896e245e0430ac017e08a435cdbc738c57db45618c1a","ssdeep":"","tlshash":"3d11d8e28bd70919c690d1fb738b212cd70378c96c5d56342236b8696eb0456721fb57","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.146896Z","times_seen":8,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/css/responsive.css","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 10:44:02 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17081,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7c8a3c61ba5371fb0a08281a47b50236","sha1":"94e6259cc3b815805703cd3d19e106bc73c9598d","sha256":"8430cc70173b18b4dc58bb081716bd5e327e569da4403e63cac57cdaef434f04","sha512":"dc1d5e3f6b4ffcbcd5cfde649131f76b84ef084d3e1166dcad41ea274ecfb89a4d1b1df90b120a6c487cfe888988c4771dce81d35685927d053a2087c85524c9","ssdeep":"192:eWeIz7OeDduL0J6yCLdochQlXP56FTL5t9ex3n4Xug4uj5PFpcIaSElfgfzs0SRC:eWJtYFBeg4uj5PFpBzH/fp1QJFHMt","tlshash":"f3724e03b111310c09779137eae62650fe674023db46a1eab9bf7e56cfee5460272e9c","first_seen":"2025-10-21T18:51:26.498287Z","last_seen":"2026-04-22T13:47:26.166321Z","times_seen":3,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":326,"dns":1,"connect":171,"send":0,"wait":174,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/trustpilot.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /trustpilot.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 14942\r\nConnection: keep-alive\r\nLast-Modified: Fri, 14 Feb 2025 22:45:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14942,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 510 x 159, 8-bit/color RGBA, non-interlaced","md5":"94a227657c4f6806f70171991da11ee2","sha1":"baedebe152ba9fe4eb5fc80860057f621d066148","sha256":"e152db88857225d301acc1133dcd5703b1dab344698acc401a438ba30147fc6c","sha512":"e91b8ce4cd25edd440b7d2121fca869c8f5943d0afbaa4030a9a8c2943ba62065bc3904d2ea574545e47908ef34ea7ee55b34c97c8f1f883c066472df3ead877","ssdeep":"384:nGU51yh4CcFHEmSCgxJasv6P04+bUcfRJ2jG5HJltr:nGcvCOEmS3d6ePwcr","tlshash":"d6629e84f2d695373de5d0d818912b4fc1e4cc7a49adcebed4a388c0da7016ba5b4f29","first_seen":"2025-10-21T18:51:26.511861Z","last_seen":"2026-04-22T13:47:26.135059Z","times_seen":3,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":669,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/script.js?40","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/script.js?40 HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Fri, 23 Feb 2024 13:18:54 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10865,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d885fe7aa4c35d324ec3b981c14bb2e3","sha1":"2ae85a96091115eac4934743c2e13f72354a6898","sha256":"a29cd6a8d9f02e29a320146018eea111932f971ecca1343aa729008d3b10c616","sha512":"214c82d3b18e6aa390d06f08cf82bb22ab04d823c8eb6b5f952a6a8c54d750a3df280ea87d4c875428be980a52e710c87bc332cb168d862be466cc2f3fd9c847","ssdeep":"192:qnEWiWFbV3HoWqI9ym3ckjodvBho/sfKijasitibbl6oNsDKzywvNe6o1sD63W1C:qEWiWlV3HoWqCym3c8+vDo/sfvaGZ6oW","tlshash":"a32213ab3da320614babf1fa5baf4348743052032841ec45794cdae11f55d60dcbeeb9","first_seen":"2025-10-21T18:51:26.521288Z","last_seen":"2026-04-22T13:47:26.138386Z","times_seen":3,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":640,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/48db22f.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/48db22f.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 2148\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:30:20 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a05ef8462e01971656738a80930143aa","sha1":"7d0738484d12cd45992c7d8d27480f8ee139e359","sha256":"b01cc670888be66dee3142d65ccee5e1d834417759bbb356e8c64b52fcf9c129","sha512":"3a5c2cc785ca71ca395a61af922ee9187245c3b6fb0d78bed800efc9e6ad0af3866f4a295e48bb4e5529bf0d081a4cfaf1bb040136c5a68edfef66d2bea04d96","ssdeep":"","tlshash":"d3410a80e24e7440f18cfdb0937505249d13409a319c7ef60e6ef27b0ae47581ed53e5","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.122934Z","times_seen":8,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 11:22:09 GMT\r\nexpires: Fri, 16 Apr 2027 11:22:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 525301\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-04-22T17:42:11.682964Z","times_seen":11791,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:11.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 20:51:12 GMT\r\nexpires: Mon, 19 Apr 2027 20:51:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231959\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-04-22T17:11:23.762416Z","times_seen":60736,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/flag-icon-css/6.11.1/css/flag-icons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/flag-icon-css/6.11.1/css/flag-icons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://coinchanger.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:17:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1446\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"650793ac-5a6\"\r\nlast-modified: Mon, 18 Sep 2023 00:02:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 59272\r\nexpires: Mon, 12 Apr 2027 13:17:09 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEYOAWJaqyOYMaWX6hJPSa8wskPBQDl%2F5Xce5Kt29s55c0MuHuSRT3uOwb5jGNyU1PLi2WUcDVdaQSo4qj3g1i7BCU%2FL0e5X9h0bly0NsEFI1W3rCs1bg5%2B%2Fmx%2F1DwmSeEaiJc4N\"}]}\r\ncf-ray: 9f04e8339c8c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27740,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27740), with no line terminators","md5":"de17d11e16764237149a58cf91aee593","sha1":"878d12c54970c94f8591262ac1cf80d09c737b42","sha256":"5a1922861477bc08bb85fad3e2ca3a7269586704b212e46c3624026967610514","sha512":"6502b133967e3e63956bf566212bc772a9548333de8d8f76f88facbabebdaa207b55df9d01a0cd330cbb02746be877056d8638b28d4514f060ba0139b368e6ed","ssdeep":"192:06XxgF5JRQUZuEvCtkCNDpfDYxmn21KoLSQf0599xT:ncvQmv8DpfDYxh50b","tlshash":"93c20323d2c6e46fb84b5a33741a775cb2db5ac7d305473b6a6f62b5e41a084343b1b0","first_seen":"2023-12-17T16:16:53Z","last_seen":"2026-04-22T13:47:26.133547Z","times_seen":712,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/jquery.easing.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/jquery.easing.min.js HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 20:45:26 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5607,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3601), with CRLF line terminators","md5":"cb13ce6e9b41da9553d9d9266dcb6f62","sha1":"12f67e93b24b5afc87ef925a9f8564078b92df2f","sha256":"a1e8de3faba0e83cce168e1d0923034e76d4ff2e6103efb8d957ca92ea81ccdc","sha512":"45577009502a366714485fc1bc388ecad1390904165dc9e1ea750a83edac8865f67eac12b7f437eec9dd5ed3e899b92f791dd5b757025d28c67268ed35eab11f","ssdeep":"96:lUejDjbb0OrPJrFJzhOroq3w3znhG9zp4tSZCHjuwE9nCDTVpWZ:yAwOrPJrLEsq3w3r49+uwLvo","tlshash":"9ec10f8975f1761963b133f0117a201bf29dace5160e6808f8b4a9997c7b17c87bbc6c","first_seen":"2023-03-07T01:10:53Z","last_seen":"2026-04-22T13:47:26.113324Z","times_seen":308,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":481,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/12dfb73.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/12dfb73.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 1364\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:31:44 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"95908eedc2a7491f5ea55e241de95d28","sha1":"106f85235e8f2103f36886be155dfa55511a4462","sha256":"ea1dced35ad25edce8e3cceb1c68f226d99a25ad279fe7cdf260e2a7f0a22d88","sha512":"a5bb72fdbe1d7fd2361570eaf5601db010694d8bb2f5dfa623a5bde5423c60d2ca0629c34d5900918ebe779d48c2064d77bbf4d26a0696d7c3752eab41538599","ssdeep":"","tlshash":"392108e621c05530868609ff7ec4edeff14b6c029bf148ea3062086b1946b3b61347eb","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.140616Z","times_seen":8,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":339,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/4ebb621.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/4ebb621.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1927\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:20:16 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6d8b806590a42df87a16e79c8d33b16f","sha1":"36485459ac3cca8bfb4505aee1e1712a8ce7b8fc","sha256":"5a6185f624b7febb1dc709855f2ea2f7226761afc5b588446f5c0f47a1bb9638","sha512":"7df6ed2ca160c05e648aa6d862840c0b32c13245694fb59aad3cbf8996980e0cfbd0a1fe7695fb8f4e795fdaad75bdcaa10b5b309aec1feb6c0f115f473d4a86","ssdeep":"","tlshash":"95411b487d9d11c9bc17770148265148bcd365f77e20644b972cd0e33bd6bc136e5939","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.172463Z","times_seen":8,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 13:17:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 63572\r\nexpires: Mon, 12 Apr 2027 13:17:09 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpXbtFI%2FP1bvTKbGJNJhnN4L1YZDB6sD7RF%2BufDi8bh3uaVBXzjaWHJNK0mQ0se7PhJ%2B4ltmMtmge%2FMCx1P79YJcGAqi%2FhTt6ULRJ6HHD6jvaNWMZITcjiLiPgQxHeVlZZjmls2t\"}]}\r\ncf-ray: 9f04e8339d458deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-22T17:07:43.993603Z","times_seen":248620,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":13,"dns":1,"connect":4,"send":0,"wait":6,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/bootstrap.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 20:42:18 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36874,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003), with CRLF line terminators","md5":"fb0e635db142b1b9fce20fe2370ec6cc","sha1":"c5c481ca5a263031d938f6c12abd2fe5fb4b6a83","sha256":"5a4a5359110a773bd154da94c48ffd6a6233a29dfd5a9314555f5ae6c3e47459","sha512":"ddcff973930485feaef0476731caf0d210e4e9be47c6271fe5a9175a885f27509558b1ef1be42e791e0398d7d109bad33c3a912b11653c3290825bc0c7871411","ssdeep":"768:9UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXfl/8Gf3ZTbQ:m/76whqKGvl33ZXQ","tlshash":"9af29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","first_seen":"2023-03-07T01:15:27Z","last_seen":"2026-04-22T17:34:28.543652Z","times_seen":1713,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/ms-Dropdown-master/dist/js/dd.min.js?ver=4.0","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /ms-Dropdown-master/dist/js/dd.min.js?ver=4.0 HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 13 Oct 2021 17:50:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29823,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (29759)","md5":"8d164a9dc6935af784c028dc3a73dd5f","sha1":"ded9a1d10e40c00f67b128132288347eb9cd19a4","sha256":"2fc23eaad51d463b4f98676ee3c6b8a69cf6b84c980eb1f8e597183f0052ce57","sha512":"fc1a30b1c5dfe01d0e51643de109ebd056407738e2e79206eb99773cbdc379d2ed7eccc2b71dfd5886cc510ab5c7a647aa77e961bc6629f71de3c2c93a48992c","ssdeep":"768:f4Bn+Cc8s3y+ugJ/hlNlll+LL+ZhxgusjR:NuQZlNT+DR","tlshash":"64d2a8122365752602fe90aba4f84543e37976dd5d0042acf5a8ecdf638ec40b2b7bb5","first_seen":"2023-05-30T19:57:02Z","last_seen":"2026-04-22T13:47:26.169062Z","times_seen":17,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":639,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.sI3zGFi7Cfk.O/am=AAAAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfol5EDAVBAUZnl22NrPpbX8UFAXxw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 120999\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 17:33:05 GMT\r\nexpires: Wed, 21 Apr 2027 17:33:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Apr 2026 19:10:48 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 71045\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":419116,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"fd3e5e88f56e2223d9ef3dc30817863f","sha1":"080ad8c078433403b83c284a02d2e95c22ec7ba6","sha256":"4be943c66cdfd8c2fa8c3570f14629e556bfa6e01afc413275d0440e3be97ddf","sha512":"8fa361b5ec195581ab7b7a2d52be9901fba9da0939063c36878180193414e26ff1bc86231176ffb68c31dde5b90a91ee7def81ac5ef7dfc00826de6b7a13670b","ssdeep":"3072:XJNmEj9es4bkvJ3NnvRx3kSzACvVcUJjNMByu3NFpFH4dzr+FnbTGssAEElTsF:ZrI0JSXYdzknbTGjn","tlshash":"4494e9d9b26274629266fca0a47f00c7b53dac57a4884c6cb249dcd62df090952b3f7f","first_seen":"2026-04-21T18:59:47.631327Z","last_seen":"2026-04-22T18:04:59.557639Z","times_seen":109,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":69,"dns":4,"connect":21,"send":0,"wait":33,"receive":53,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/a04460b.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/a04460b.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1933\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:24:54 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6627d4bb41d74bfe2fa1fa74b3a71955","sha1":"5503b308fa4f6627be098b7ad3ef7487e1f33662","sha256":"7c3ee7de846f18d6f6a9c75817106b40168289afb09b7256692b2c8cf24c96a2","sha512":"ab9331d9037542a3e84f484691059760d57111b64deed508153cd7cbe292a4d009a288ab34fa0b0451714c9bbfbddb76c2ca25d070b43e7aea9b832f380f7caa","ssdeep":"","tlshash":"f1410ae044c4fc94496e7ec6d80b5f5484ea85889ea2bca6d62123413ff9d8f17346b9","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.146139Z","times_seen":8,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260420","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:11.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260420 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 22 Apr 2026 13:17:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce--TWvryVdPtBW-Ku3gLBUqw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmII0pBiEOLhuD5l8Xk2gR2XXm9hVFJKyi-MLylKzCvOSSxJLU4tKkstijcyMDIzMDEy0DMwjy8wAAArfBMF\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=33.SE=VheO6fwtWpf5S-s1zKFnLSDhHnD9HhjaQwJ4UB_vD2B9qOdaVa770nF5V5hYEc0OHEkVTTKnnLWxv8wg9MVIVtBtIScc5gVX0GolE7Eh_L5x50ZMff63K5pacgFm2t88tUoknX3kdEjiDPFVKFG6WcOocRt6ZMTDXwN-pU-WbpxY8zmVEctTV7dZwLdafi24kxV8oWIb7IeuqEL_IvVwB7SOjLR4Az8ZwKRucwwRIntuRnTju7oR; expires=Sun, 23-May-2027 05:35:29 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T18:09:28.300102Z","times_seen":14071331,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:20.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinchanger.cash/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1162\r\nOrigin: https://coinchanger.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1162,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,\"TE_20260420\",null,null,[4,0]]],1871,[[1776863830711,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"37044A94-DF91-4D3A-B23D-DE8A831E3967\\\",[\\\"https://coinchanger.cash\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"http/1.1\\\",[],[],[],[],[null,10000000],[null,338000000],[null,339000000],[null,690000000],[null,512000000],null,[null,863000000],[1,39000000],12998,12775,55820]],[\\\"translate:page_load_to_initialized\\\",[1,39000000],[1,871000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1776863840716]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://coinchanger.cash\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 22 Apr 2026 13:17:20 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-04-22T18:10:28.916296Z","times_seen":499389,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/images/android-icon-192x192.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /images/android-icon-192x192.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 12278\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 19:12:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3320fd8bea175149a9606dfd18253dd6","sha1":"1f7419e580ee39e00b9437cb48341f748f3d8ae1","sha256":"1b8eddce5015af29fd197ac5c609cde2bb5809b2d4e775b1eb22e1dbf21358d6","sha512":"b40c9b6aeaf985d43ece019c7e415f3dff28d360b1b1eabe327ec7b45559c9cdec0f14ee9048d88ff187b4016d678f706b8392d1acd28f13a1840cec38a2027a","ssdeep":"192:DIIHUCD4waQ0kYCC1hcR2ohtRJunVV23LC3tR8o+QSFrToA2RyBaYLMIMhgW2EQM:N0wZ0k2MFxJZ34tRIQuoAf/nxWOWjty4","tlshash":"9f42c095952ee284201a1f98262fe513526b735012bd3b3c7637661fc96229672be383","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.117426Z","times_seen":8,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/posts/small/2023/The%20ultimate%20cryptocurrency%20exchanger.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/posts/small/2023/The%20ultimate%20cryptocurrency%20exchanger.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 67473\r\nConnection: keep-alive\r\nLast-Modified: Mon, 02 Oct 2023 08:50:05 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 234, 8-bit/color RGBA, non-interlaced","md5":"628c1f847530b88c4df95d54767c9f94","sha1":"7306b12fd41b29de75a76559fa11b40c24d92294","sha256":"8113169e9c03de941a6867a6fea7effca55a11272f300543506ccfcd450b8756","sha512":"bd10e52cabe7f0b3701b6c4ce6dac3f13229a04c4c06ddcf3790900763fc0f6cbe8e8e2e6422e9b6fe2c81570292ac9d56906fdfdf8624bccca2403e5a86c097","ssdeep":"1536:mv/nzRvGSmlg05rNABzF1cteSK7ekFpP1b8/lRei7mzfDywXqjI:2/zROpC05NABzgts/Fph8NEYmzfNqjI","tlshash":"a0630206ea594464ff2a8778c3254f5ceb866a862edcff2d801c7d818f577a09c58cd2","first_seen":"2025-08-09T17:24:07.14895Z","last_seen":"2026-04-22T13:47:26.111614Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1363,"timings":{"blocked":846,"dns":0,"connect":0,"send":0,"wait":344,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/bdc18d2.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/bdc18d2.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1104\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:26:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"fcc19515edbbeecfe99a6dd6464ceff7","sha1":"14a26602266d5f495931b9bce74bdd1a312e95db","sha256":"dab9bf890f79b37b6fa4d86a555967e5c2517fa3fa24360dba516a0f064860e5","sha512":"cf979f8dcdfe7559b6fa86a46ef45046c333b1311c629a19fb474903beef572a0885280db1615241fd28a96d572c5987717383eac5dea210466745e89a6a20c5","ssdeep":"","tlshash":"5f11f9faca24acbccc48fab39bb0505db96502005382d1291edc7503d4f9eb540031a7","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.173395Z","times_seen":10,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":264,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/countrylist.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /countrylist.js HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 14 Oct 2023 07:19:58 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64781,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"8737b98b5913a4f2afe25f4c8f5b5559","sha1":"c788716b1405b8acdb74718c4aaa5f6bbb83159c","sha256":"116e363b4e8a6d01998a4787b3d3117e93a44b8f5f74bf81ba591ee333294fd9","sha512":"2f706b82fabd6a9128928ab1edc19e6b262eff96a6e37e18a3ee7556b3f733c7fecdb74d0dc8f545554dcd53b063d234f2912c24fa81542f7382a5097175a613","ssdeep":"384:umdmR/KKUYz8957pYQUnP/fzh2cys4DN/JyTbD/0:bdmpKKbzM57po/fYcY2A","tlshash":"25538d7bceec4cd555588562806eea87302083138eea7c5d73acc94d5faf80e67b419e","first_seen":"2025-08-09T17:24:07.147306Z","last_seen":"2026-04-22T13:47:26.126831Z","times_seen":4,"resource_available":true,"data":null}},"time_used":854,"timings":{"blocked":322,"dns":1,"connect":176,"send":0,"wait":174,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/myhtmlselect.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/myhtmlselect.js HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 20:41:42 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21622,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (393), with CRLF line terminators","md5":"130ee9ec246a842c524e658837ac52bb","sha1":"cf032d2d1037b9b2558bb79d24494479ffa94232","sha256":"6fb7bb0365c2e73ec5fe7ac9db5789e8ac42704a6aca8469c4e806bdcdbf8132","sha512":"aac3a1f597486fdf3eacdcea86466064ab74368587724bbea3e95b43a02a4342890232a33597666aec2aae9f53864f2d66ec462d1c4fdee1e463ec61c650d3a7","ssdeep":"192:hnNHTaB4fQch8dzIyxITdShhpmCK16nDkoES45RDLUXLB:ZNHGGXhi1xIkhlg6nYoESyRDAXN","tlshash":"4fa23f04611a1276a0bb23e74ea664c8e275c73b510aca92356e47d90f75c80e2f7bdf","first_seen":"2025-10-21T18:51:26.454251Z","last_seen":"2026-04-22T13:47:26.087931Z","times_seen":3,"resource_available":true,"data":null}},"time_used":644,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/images/page/banner-1-1-1.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /images/page/banner-1-1-1.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 48393\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:09:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1168 x 632, 8-bit/color RGBA, non-interlaced","md5":"c8090408e9da4316824d34bb656bc262","sha1":"3e2839a8ba1c9d0da38c644d8b6c0f7f64610e8e","sha256":"f2102c987713a2952bc39fb7955069a1a46cacd8e41766c94bdf1b258c5f82b6","sha512":"6353537fcb87a59facd11b09476ee5d45dc081c69d137d7071bf1c1f196c800407bd806d3987e37cf299d653695a74b215039c18853b3d2ca7225327a35741ec","ssdeep":"768:ZzxHoEHNvddRZJeZaXUHg2U5/9lyYSNChmGKtpZPAf3xagZM2WUo2U02ZBEac:Z9X1maXUHg2U5lQrymGKZo3xag+Uc02k","tlshash":"5223f18bdb430903893f74e581ed9ea5a522ccd1f6ae4960367c01e87b7a1b510fbd9c","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.139138Z","times_seen":8,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/18a48c1.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/18a48c1.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1506\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:25:24 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5e82b1dc772ee11c6c0b20f6a0e9b8da","sha1":"2a2a983cd673d1c7deb7a5cf113ff8a7dd2f6b6e","sha256":"6a00ef2670157738264638d4f31a657e3990ec342fd82599617f8934f4f9de72","sha512":"fbb24aad7d62dcdd4a6824f05e00dc0d0320764e74fced1e81590ad79178c51710a236e74339fe7cb357845e87f35b2ed88e11071e658b68013a5c2fa2d01216","ssdeep":"","tlshash":"1931a7de94c8ec58179f764adfce2bb4d0794ad5a8285e8bf30220c647580d8d89d11a","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.122243Z","times_seen":15,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/8cf0a7f.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/8cf0a7f.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 2445\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:31:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2e2975dfe88bd24b29010115e48a9e27","sha1":"d2e557a7cbe5797ebbbb5c67b17bf7c875fa3374","sha256":"f1ccdf434a8e66d2efec033856e77dbd33ce39a4fbf2ea9f37cd356a9e50661c","sha512":"26a1262e79bed8c645e5c2d0724ce2e5cb1ab0da50e944c2625e0c92555d32b2a0b702cad095b91c8b4d1c511b9f839f2dc7936a864db2bdb92439c4290c3299","ssdeep":"","tlshash":"15510ab2cb26bc8f8fcf4136c66ea85a1ae78452a000800e0fb1863bd53805b24b5665","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.139881Z","times_seen":8,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":210,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/7f41c16.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/7f41c16.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1317\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:27:20 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"105ece90ac8a80418128fe85d4b10ce8","sha1":"cae7437405106aa83239fb348698bc7788592e39","sha256":"e0e8feacf1edac2b5215fb5ca105685a4bad5afc2cdf3c34583797a743fd2a52","sha512":"ed78d99cec56102b8912d979584d569b01e88fb961ffeb7bf02d2ae27db8d709377897540fd08c7f5f97216cc1f0a75e4f9292893ec0ae4ca9bdc62f2e704266","ssdeep":"","tlshash":"d021f8455e30e80ee7925c274eabc000eef683e34a4ffc6eb275ca1600188581894bcb","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.123549Z","times_seen":8,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":262,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T13:17:07.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:08 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55820,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3499), with CRLF, LF line terminators","md5":"ccd0fc43b6b22c865bc478d82588a1a6","sha1":"9ab28b7018020668a5fdb5ef1471b2ff82497961","sha256":"aba7c18fdf5307fa6f30f0f5451ad3f71e0da842d2b4408b6ab1073539023803","sha512":"25098fbedafe7d1b36cb0faf4efa1e88aa60e3d7f7f7ce51feedbcb77dee0e710d54278322f9e41790ccea3718b372f535ed638e1cfca0d0f9c411f4552411c3","ssdeep":"1536:iEVmpKpfEKM1uRgm871CpnxxnJjVWYlgXJ4cSEOlA5:iEVmkpfEKM1uRgD1WWYlgXJ4cSEP","tlshash":"6743b52178e0583310f791e47eb2260afd75924bc60ac7447bec4be99fe2e85cc23659","first_seen":"2026-04-22T13:17:34.813771Z","last_seen":"2026-04-22T13:17:34.813771Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1704,"timings":{"blocked":676,"dns":328,"connect":172,"send":0,"wait":346,"receive":3,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/images/arrow-1-1.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /images/arrow-1-1.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/css/style.css?23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 1126\r\nConnection: keep-alive\r\nLast-Modified: Tue, 10 Oct 2023 10:33:39 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 14, 8-bit/color RGBA, non-interlaced","md5":"da86b4cabc15cfaa0d35b92b476e3491","sha1":"fb72564bb383ecc37ca1d5b97530bc7346bd10c7","sha256":"a7fc9483590ae00141aa4f6810273b94f0d4ea2eaca8fb4c310c035cba64ec3c","sha512":"84c7867ee035433bdeb8921563f80d306a6a6a9cd1f8fcf3fd7c16d7c1e1930066e5f0bb918b7288439927d9f2c15e88ef1181805bb94f8f8badbe8b5d55181f","ssdeep":"","tlshash":"e1216309e4116842e69bf0893cf7c237cd2f1450b5d4e1a669cfc4053c74470053a4db","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.099463Z","times_seen":8,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinchanger.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 18:54:17 GMT\r\nexpires: Sat, 17 Apr 2027 18:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 411772\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-22T17:10:15.981246Z","times_seen":205005,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":67,"dns":1,"connect":12,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinchanger.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 09:37:54 GMT\r\nexpires: Sun, 18 Apr 2027 09:37:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 358755\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-04-22T16:57:46.331798Z","times_seen":60610,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/bank-transfer.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/bank-transfer.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 30640\r\nConnection: keep-alive\r\nLast-Modified: Mon, 13 Nov 2023 19:16:08 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"3d4637d4f5a59075f46bbd7ca6bb4e4f","sha1":"d5c9632aa7dbc75e05db700f9a1e2d27f4d721fc","sha256":"cf6f24e24c9b6ff523c37b2ccf241e05e25d177ca4bae9a202c6b3e5bb3eb2fc","sha512":"5ebc378d4b8b39412fdd9164ed052cc1415baf500782ab3623ce89c4fb2b3ca14569fec79d2c7ca9ba10ec39dc65f29a0e74f1c2f50e3f74fa0ff1c13f4c9eba","ssdeep":"768:q8ipkMCPB8Oe1/8nTfZuwKiidp9kCojDMVjMKIiN:q8iC9SOe1/zwKiid85POM/Y","tlshash":"10d2e1af18df41a37cebc1b478553a1b8099071e858bc0d49634bc48eef658992b27df","first_seen":"2025-08-09T17:24:07.069009Z","last_seen":"2026-04-22T13:47:26.143068Z","times_seen":4,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:20.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://coinchanger.cash/\r\nOrigin: https://coinchanger.cash\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://coinchanger.cash\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 22 Apr 2026 13:17:20 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T18:09:28.300102Z","times_seen":14071331,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/waypoints.min.js","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/waypoints.min.js HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 09 Feb 2023 20:44:00 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8051,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7808), with CRLF line terminators","md5":"4fe14337a62d710389f42e8a5d1043f7","sha1":"5f3e0f34b6d7460c5f160db4fe568cde29f3ffa5","sha256":"069b3ff0c0e6c33e08368f94906ae49ec76ab1ed570819c768148ced15b138bf","sha512":"1640c47e1fec258203fdc02be6722ecb46f941bc9deace00cd4efb9a90203c09562cb43b7284d7dd9b4a4d3975a96130d0c214d73de567d8f88487487d88491f","ssdeep":"96:fdBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:f5G3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"94f1fac9b4c7b4221befa0b5d43f060bb33a9d4561098068f194e4da3db4a6da567f38","first_seen":"2023-03-07T01:41:57Z","last_seen":"2026-04-22T16:13:05.081683Z","times_seen":5710,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":476,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/recent_transactions.php","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /recent_transactions.php HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinchanger.cash/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13146,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"70c256696ba108a297e0e2e0d24e19be","sha1":"3238e64610bd2b982721171438a16866d8610d9b","sha256":"c8516b2d1e8696060d3175bcedb509d8e8c5f0ddc624dfe9b2a47302860ee8ae","sha512":"96961b007d6d4c4a0697b3df9fb084e6ec2ec6a21765aeefb6ce3c8415cc9996239e1d6a9e8885743f7e48c70175bfe5b08da2a93b7d16e31392a7d0a48bb86b","ssdeep":"192:3jnmY+r8ac4mY+f1cqmY+fRclPmY+Ozc4mY+HHcrmY+r8BcGmY+r8EcXmY+r83cj:RtFbK46F","tlshash":"f3425a61e0fa815a82df528b7ab46b0b3aecda43c517552537dc5b888f97cc3ec23164","first_seen":"2026-04-22T13:17:34.819082Z","last_seen":"2026-04-22T13:47:26.105273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/dai.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/dai.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 5631\r\nConnection: keep-alive\r\nLast-Modified: Mon, 15 Apr 2024 07:52:14 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"664f0782d9723352ebdd55199998ff43","sha1":"91abe6743d72b5a0c2f1fa27ddb21c38f011cab8","sha256":"9795e4eba0822f4141998a43290e157a5c341f0bd8a70dd6d114747abdde347c","sha512":"8fbf59c96c38bc7794f0af628506e98584df8b4087044098aa298e1cce478bfcad16afcbb4553038e9214fff0e6c5bfd2f66e6966caaa3bd0064df853d75ede8","ssdeep":"96:DAJFcjaz0I3N5/AcpxAKZo/zOUNptBbzKVbFNkWT3dtN3yw+BhoBZ8snoKghL:DAJdzpxf0z5PbgbHkWL5yw+rC8sQd","tlshash":"06c19d5325c0b9c4126ac170939a9f5232345def242df709b46d74a19fb29a4f08e7f5","first_seen":"2024-07-25T19:27:13Z","last_seen":"2026-04-22T13:47:26.136685Z","times_seen":64,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/transferwise.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/transferwise.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 22340\r\nConnection: keep-alive\r\nLast-Modified: Sun, 05 Nov 2023 15:51:42 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 456 x 450, 8-bit/color RGBA, non-interlaced","md5":"78860f5bef9a88e14f4af52f83580852","sha1":"ca0964822598da993572bcf4a9dfaca0435f25da","sha256":"85e10ca85215a22902a2078aa4342c5bb341ef199cbcf67a25ddc07ec6798d78","sha512":"045a8dcd0cb59607699e678b450aec6b19262bfe82feeca847afd082f85b33a13d16098e4acb0195a72bd18c6ece55aa8480d3f7ea365b90a7f5102ec5ace78c","ssdeep":"384:i5U1VvvpOAvymYcPh6tLLv16WyI6M/qIVv2h4KjWIGr53Ljuo18HE5B1wO:FrxjvvDPhgL9wzMC9h5jWVr57F13B1p","tlshash":"3ea2d06bce810ea1c2d0425e36c552874c87267167f7ea729d232da6fffcd66554c304","first_seen":"2025-08-09T17:24:07.106139Z","last_seen":"2026-04-22T13:47:26.149168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":395,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:11.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBA4/d=0/rs=AN8SPfr1syY1wAuGFLO2Vlg3MbJfRe0PIA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Apr 2026 18:30:38 GMT\r\nexpires: Wed, 21 Apr 2027 18:30:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 67593\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-04-22T17:18:40.755191Z","times_seen":1480,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/ms-Dropdown-master/dist/css/dd.css","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /ms-Dropdown-master/dist/css/dd.css HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sun, 26 Feb 2023 06:10:32 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4407,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4003)","md5":"92072dac98544ca931d5f7f69d3adbbe","sha1":"9599d338119facc020d27ba6bf10bba6afcacdd2","sha256":"3ef5ae599a7b9bdf34f888b1e636fbd5ffb9824ccb16f8341088c91cfa08eddc","sha512":"38c0c462c08f9abe392ee7b9ebd128c449ad944ef3dd88fd300603f6be4d8516e6c9d106c3816fe78b7fcf9f1bebec6d19e4c50ec1dadda283b683c4eb39bd41","ssdeep":"48:U8I6DEw/K7EoSamBoUzLyoUPGJdRStAPUikON3ksE9WTEWlIw4gjKXAJZiXQk:X9SAoSauoUvyoUPGvHDFOwI/","tlshash":"f69122b13093300fb9eb86dfb485a7cf502ed627b97e01f72815b769c68a7c94432844","first_seen":"2025-08-09T17:24:07.140865Z","last_seen":"2026-04-22T13:47:26.09816Z","times_seen":4,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31021\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 04:48:52 GMT\r\nexpires: Thu, 22 Apr 2027 04:48:52 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Fri, 08 May 2020 07:05:03 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 30497\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-22T17:03:20.430081Z","times_seen":225772,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":9,"receive":8,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/posts/small/2023/Quick%20and%20Secure%20Bitcoin%20Selling%20in%202023.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/posts/small/2023/Quick%20and%20Secure%20Bitcoin%20Selling%20in%202023.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: image/png\r\nContent-Length: 32147\r\nConnection: keep-alive\r\nLast-Modified: Mon, 02 Oct 2023 08:50:05 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 234, 8-bit/color RGBA, non-interlaced","md5":"798a733482a5b685bfd57bbfc7df27dc","sha1":"0cc322a3fdd3bf459271c23a9a6636297d639b79","sha256":"55fe9eadd40bb85e3306e75402bbe3e99a0239bc119234eea0cd7fb0fdd4f8ab","sha512":"3531a3b00d6c44c6a60ed6d065a10aae8fe4c6858d417ff68b969a4a2d1ba1ad41a456993283eea708692a2ef4123b305bb39a6a81e5fa9528a912a7b00f1272","ssdeep":"768:esG1v090QF0CSUNOwdBrt5xMyONpFmydors4CNfE+fyYKpWg:Ve0KI0NUrl4pFmydorbCNfEN9","tlshash":"36e2d11f7d55f127db9a62290cc02705bb5e6cb80c7862c30a9b71661979ccd948e1ef","first_seen":"2025-08-09T17:24:07.096935Z","last_seen":"2026-04-22T13:47:26.12763Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1184,"timings":{"blocked":844,"dns":0,"connect":0,"send":0,"wait":170,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/ms-Dropdown-master/dist/css/flags.css?v=1.0","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /ms-Dropdown-master/dist/css/flags.css?v=1.0 HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Wed, 13 Oct 2021 17:50:22 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10306,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10257)","md5":"212490c264131cfa7b440e124b1cffd1","sha1":"67a31bc6872598f87d658c156a6b812305ee379d","sha256":"8339484944ab9dccc28d681d7b72cfee76415bd8ff5ac2fec4c38696f30d27d2","sha512":"413a5080a31f4a158b86b16ce7068b7a5ed25f2dcb8365a37bb0ef6adee60e310e635375660cf8320d7aab5f94c0865dbc2e541e328655a52c9a1b2563f82d90","ssdeep":"192:mLgclXZtCZYjLHgQksZzRBc3quP4ydxioPB1ePvQnR9cT98jCKnhmb/y0UmWp2NJ:qNPH","tlshash":"1b22925588e2213dfa57f62571f00694d23a3245d8620f7d346ebabd33c26e88477ba2","first_seen":"2025-08-09T17:24:07.157058Z","last_seen":"2026-04-22T13:47:26.143869Z","times_seen":7,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":331,"dns":0,"connect":168,"send":0,"wait":173,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/payoneer.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/payoneer.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 38712\r\nConnection: keep-alive\r\nLast-Modified: Fri, 20 Oct 2023 09:59:54 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced","md5":"137b67e084d85fc179cd4fd9c8ada567","sha1":"383e58beba9b51809dd2c2d9423bc45fe75a310d","sha256":"1b19f9b1c050914a54177d1ac36bcedc5cd41ce59f84cee77ccd1e7d9110e37a","sha512":"a7422fe470dff7de0153baf2fbc5633b67b5c5564c19a4ab97f2e0229b170f4c67b319dd6eae0738879bc1f4d1da1d3dda173b681a8a0df1f6f934a6c59c5f8d","ssdeep":"768:c6zxEg/UvzSAW1Y/8wYfA+NoOMwLw5mRCfqYxk1IsT4AR6jLXe:fyse+ukwY7RLfkqYKJR6e","tlshash":"3403f12bc104ad9fcd543f0ea3e4c607399bf8c3575e3729e75c91a4bd608a2ca0c695","first_seen":"2025-08-09T17:24:07.183696Z","last_seen":"2026-04-22T13:47:26.148414Z","times_seen":4,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":395,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/Neteller.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/Neteller.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 19176\r\nConnection: keep-alive\r\nLast-Modified: Mon, 13 Nov 2023 19:24:12 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"a73f787c1bc68c1f79a6b2b7cc173841","sha1":"10a3ac5db5b7013753f7afd634013e5f359eea81","sha256":"ad883e99e4d5f8eed8997393066a7caf74c4109d1c3b37bc44921224a502f5e6","sha512":"15655dfff9d9679ff6baf5080178390633e74b9664f38ab970eb48bcda9e08089abbb23a22e9713573c0e38669fcb3d75fe663291b3035ea78ecb92714e27a99","ssdeep":"384:cHJRch08rvH2ee+6kSOj5jfj+n+K1EX5nHRoSgF9Il:cp2zHHz9pa+K6xbgEl","tlshash":"6582bf4178ad2bb157bba200da3844d57f685e4ac5ae9fc27ca824e4bb73106d703983","first_seen":"2023-10-12T21:42:35Z","last_seen":"2026-04-22T13:47:26.124192Z","times_seen":6,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":492,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 22 Apr 2026 13:17:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CIkD; Domain=.google.com; Expires=Mon, 19-Oct-2026 13:17:09 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80955,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2056)","md5":"8919f1d279de9963f6b4b371b1c75c5f","sha1":"587bf8f33a8dc2111aca4da66b95ca3097108694","sha256":"4b02b53222922fccb3ca167a3ddb0783205562ee7f6361eb58c8552cdb7f0217","sha512":"dc681aba0b8c0c958cdc8f31dc1541cd2fe88cba7fac4a0136973665aaecc9a5dffcef187d3d751506d3f5206f1a3e8167a1d77a69a77cf180a9acf1ae1da94a","ssdeep":"1536:XNzri7CtoSq2LILZLUGtYirKrhm3oQQ4CuPKucbRrWKiBwNWmF:X9tILcirKrhQCKKicF","tlshash":"0c83c8c8b6a674a59353b5b5513f000eb23f589df8084dacb288d8f2adb5948413bf7d","first_seen":"2026-04-22T13:14:20.160991Z","last_seen":"2026-04-22T13:54:19.799426Z","times_seen":8,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":27,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/css/style.css?23","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /css/style.css?23 HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 24 Feb 2024 07:48:16 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117524,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (459), with CRLF line terminators","md5":"ce3f2e6c31c8cd4dd260ee1e670bd3f0","sha1":"71d1701db36a863a45faec42bc3e7d8947a87986","sha256":"b03a1dd1c3c79d05a582a0342020f9e767ff0f45d1ebf5e60a16ccce1593c94e","sha512":"6bbf90df891251be6fb08095e51ac356262f90e602bd0b67d4fb067127030f5c68f0312538c90ba3260afc4bcf66a665d873d32de7680798ca27c61f58e9cf57","ssdeep":"1536:8bAQirQZkDHZ3eelH/3Qe/HWHc38eza9YtpR+6OVVtT4NQex5OipLwfL:fa9tW5OOLwz","tlshash":"00b34498e2552e4425378a7433d667d47f2c50b2db0202bcbbfa7826d28d99c0277f9d","first_seen":"2025-10-21T18:51:26.564827Z","last_seen":"2026-04-22T13:47:26.082323Z","times_seen":3,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/js/custom.js?ver=3.7.5","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /js/custom.js?ver=3.7.5 HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 16 Oct 2023 00:17:01 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25994,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (400), with CRLF line terminators","md5":"9eb33cfa5632e32fe19af2d9e1e8d00c","sha1":"e064ac7f9e4d8ce9d3f985c68e646159885ab51b","sha256":"ef40e5c3c95fca50d11ea6f8743c8e749826f2c84a671fb1cfcc1c04bbeda35b","sha512":"34108d63a9f60fe92f3ab6ff1b161e321589217e1f63563931e9ff0b779537ce2e13dfb7b8d4bf6c76a055418e56ca5194ab703723a11a563a5eb59837a1d3b3","ssdeep":"192:zeF5yJpa6JSbop5YKl9CT1a3YfhP3VUeerpOQcfqWUhhfkdUEEfkwURaf+5YZ5EB:lBX59x3YRueTY1GySKpE2Dhd+","tlshash":"14c27284b128217b92f2177575fb0501ef7c896386124160f9bdccf8af709a43a6ee5d","first_seen":"2025-10-21T18:51:26.555561Z","last_seen":"2026-04-22T13:47:26.135806Z","times_seen":3,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":638,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/calculator.css?5","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:09.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /calculator.css?5 HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:09 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Sat, 24 Feb 2024 14:08:43 GMT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3927,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"993a84720037fc656ab1a7b242d9d183","sha1":"bb011331b58d863296f5f45a8100a800233199f4","sha256":"bb6109b67425e5486a2f1540dfe2ca51325b943f4cb0527ba8ce737753425e46","sha512":"a42f9f2d8137bebe15a817e9dc0c115af15cf071a11cc38e18dc78358e66148ecc6c089527ce595a399eff3979a54c1bcf83dde2913ae70b5868ff0b09bb217e","ssdeep":"","tlshash":"e281e370730f500e53bba2a6767876b8d91ed967560b43f274f4e658c6c0160a3263f4","first_seen":"2025-10-21T18:51:26.548873Z","last_seen":"2026-04-22T13:47:26.167811Z","times_seen":3,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":326,"dns":1,"connect":171,"send":0,"wait":171,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 23:19:22 GMT\r\nexpires: Thu, 15 Apr 2027 23:19:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 568668\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-04-22T17:42:11.666564Z","times_seen":12132,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/images/favicon-16x16.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /images/favicon-16x16.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 908\r\nConnection: keep-alive\r\nLast-Modified: Mon, 26 Feb 2024 17:52:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e4229a7798ab423f30308d63602b3479","sha1":"f8d05ec3ca860e544a45f5a8247a4c98eb37ec24","sha256":"4af9eb000d1f6d9d85a31cbe9e330dfda7cef3d0d9436c620fbdd139db46e9b3","sha512":"d11d73b40664540290bf447335aac2459df90ea701482c3ee7dc30d6465c1cc8c3fc19a2f9f8249be17beb47693b8230cd2da6f4d56853d05cf136bc4e634733","ssdeep":"","tlshash":"ea1184ca12313c64eb491aa58d332aaebb74b150ca2f30c2800dbdd0344440c8161fa9","first_seen":"2025-08-09T17:24:07.10115Z","last_seen":"2026-04-22T13:47:26.145406Z","times_seen":4,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinchanger.cash/uploads/coins/ac31cde.png","fqdn":"coinchanger.cash","domain":"coinchanger.cash","tld":"cash"},"ip":{"addr":"213.111.158.253","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinchanger.cash/","date":"2026-04-22T13:17:10.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.coinchanger.cash","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 03:31:32 GMT","end":"Thu, 16 Jul 2026 03:31:31 GMT"},"fingerprint":{"sha1":"92:6A:67:0F:A6:65:CD:EA:51:3D:F4:45:73:9E:28:A6:BA:73:7F:00","sha256":"3F:69:64:4B:EC:45:59:1F:39:4B:AA:54:47:1E:49:BC:3C:4A:0D:B6:B8:33:E8:4A:40:72:C9:C5:1D:C5:34:AA"}}},"request":{"raw":"GET /uploads/coins/ac31cde.png HTTP/1.1\r\nHost: coinchanger.cash\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinchanger.cash/\r\nCookie: selectedLanguage=\u003cspan class='fi fi-no fis'\u003e\u003c/span\u003eNorway; selectedCode=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 22 Apr 2026 13:17:10 GMT\r\nContent-Type: image/png\r\nContent-Length: 1662\r\nConnection: keep-alive\r\nLast-Modified: Thu, 09 Feb 2023 21:27:36 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"dd28e491c0b8d0077a5cac873d0cef62","sha1":"c52879ae553906c62258fea79494d12234ac95ba","sha256":"306b6440ba38c8f0fa7152c43cb836ea940c091f1ff3065e0439549ed70452cb","sha512":"28625dc993d7ef3fd6c8aa03bf78ba3796e844a861f52259598f27d5dcfc916140a7678f95af5668412870eec8a1a4e25eb6ecd236ff6f5c54b8acd1fa338641","ssdeep":"","tlshash":"ff31fac6153b3ac991d0567495cf13b24c76c6926032520d5a84a3734cc3de60efa72d","first_seen":"2023-05-15T11:24:03Z","last_seen":"2026-04-22T13:47:26.14223Z","times_seen":8,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":173,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"coinchanger.cash","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}