{"report_id":"04e6664c-c300-46b8-80ff-fdc286d3b661","version":6,"status":"done","tags":[],"date":"2026-04-08T12:11:27Z","url":{"schema":"http","addr":"droidparcel.top","fqdn":"droidparcel.top","domain":"droidparcel.top","tld":"top"},"ip":{"addr":"185.170.199.234","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"http","addr":"goblinswap.io/","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"title":"Goblin Swap","dom":{"size":9980,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"15458d89bd8d800c1b687ce00a31999f","sha1":"429120c0c2b4635fc23acb506e14972cf6ccfdff","sha256":"7161bc01c6d3dad0d12e98f9f0df16cf73379192797ab7017f32129fc6860ec7","sha512":"832534f88afb3baab0f318a4f042351b64b21084701a5d9079774f806fcbe98d5b84537620c759405ebe7116dbf504cf4ad59b3a2378ad8da14947dcde632df1","ssdeep":"96:n6Kp6Sbusd1HgbLfTw/DE+lPGuan4y7sDWQVwQXzp0:6Gbzd1HkME+PAOV0","tlshash":"f322eb5290f4647b4173e0e1b9a16b2eade58203c9660911b3ed0bf60ff7e41dc73a25","dom_hash":"domhashbec93a8e6ef338a8fd5720db6a396bbb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"droidparcel.top","fqdn":"droidparcel.top","domain":"droidparcel.top","tld":"top"},"ip":{"addr":"185.170.199.234","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T12:11:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"droidparcel.top","ip":{"addr":"84.32.84.78","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"domain_registered":"2025-12-02","domain_rank":0,"first_seen":"2026-04-08T12:11:15.312559Z","last_seen":"2026-04-08T12:11:15.312559Z","alert_count":0,"request_count":1,"received_data":9355,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}]},{"fqdn":"goblinswap.io","ip":{"addr":"172.67.149.74","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-21","domain_rank":0,"first_seen":"2026-01-21T11:11:47.377768Z","last_seen":"2026-04-08T12:11:15.833613Z","alert_count":18,"request_count":9,"received_data":65648,"sent_data":3192,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdna.artstation.com","ip":{"addr":"104.19.169.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-05-14","domain_rank":690221,"first_seen":"2017-01-29T18:29:59Z","last_seen":"2026-04-06T07:55:13.407018Z","alert_count":0,"request_count":1,"received_data":249931,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"goblinswap.io/js/main.js","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"104.21.79.227","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65a1dd2cb56602cbbf3c5bf6cc834938","sha1":"9cf58af215db48c8587000fc9c8229c5519f328b","sha256":"da44927b4b0495369756b165d4214d181a71e7839a79b67afab2811b65167bde","sha512":"9d72f83461a48a3c695c53fab34c3dafc44286ee41121ab2e64309cf47fc6df2961dfe6abee40f9f105c0e5c237e545863923de30cff603f03b3837fb79080ce","ssdeep":"192:KJP/dtQNe04NKDb7cOz7euxlj588Dc6aIAkBFy2ZWfKA6OxdJS0pPHwRsAbQU2x/:204+bVz7lj588DogI650p/cbQ7Em","tlshash":"5512757820b32831467b12fa67df510a25a550a33404c589b85dc5993fe0eb0dbbaffe","size":9907,"data":"","first_seen":"2026-01-21T11:11:52.065213Z","last_seen":"2026-04-08T12:11:28.893465Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"droidparcel.top/","fqdn":"droidparcel.top","domain":"droidparcel.top","tld":"top"},"ip":{"addr":"84.32.84.78","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T12:11:06.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"droidparcel.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 23:01:21 GMT","end":"Mon, 29 Jun 2026 23:01:20 GMT"},"fingerprint":{"sha1":"83:A4:3C:23:40:B1:3C:40:AF:91:1E:C4:87:4A:6A:38:E6:B6:DE:72","sha256":"78:92:9E:A1:01:E1:01:14:16:53:C2:16:1E:53:C4:51:BB:0F:62:F3:BF:25:9B:D2:6F:A5:5D:BE:81:9F:BE:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: droidparcel.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 08 Apr 2026 12:11:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 795\r\nlocation: http://goblinswap.io\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 16\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: bd61152c65f18e1ca9619f7d24848bac-fra-edge4\r\nx-hcdn-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":8958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T00:55:21.852533Z","times_seen":14157334,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":58,"dns":1,"connect":24,"send":0,"wait":26,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/css/reset.css","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"172.67.149.74","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.737Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/reset.css HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAge: 12\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rw0VKMatMnY6TUn7uSQLXK0b6U0z%2BoDZgPlSpQR2bCzsRpqN7lyXcTSnMGDFPxyGzxvdN%2Btp8KV0MAsVfUwN41rG9knCseM05acVUwc5U2Y1ly0CLUrwOwIsw49N92yG\"}]}\r\nlast-modified: Wed, 08 Apr 2026 12:10:54 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 9e912c370a2323eb-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"b0f512e4351959b087fda8233f19d165","sha1":"9b2ad43ca15afc0938ef37248eeb0c9ffa46989a","sha256":"7ab8fbeb67c378a5a504d5ad4fb3443fd24ad4a6bd56ef966a6e06c807273f75","sha512":"0797eddaadbbaada2b0746656e8c6dce9c8730425d7856a97e9baf62f4be5e83f7eb1a6725bbd7f2063fab8b8528597cfe1f4156b34ab01fe140367e5b0b0aef","ssdeep":"","tlshash":"72d02b98420251c0c3758b3113a64528f90401770e0240197ee157965f70a2405d4fae","first_seen":"2026-01-21T11:11:52.058751Z","last_seen":"2026-04-08T12:11:28.889411Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/css/style.css","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"104.21.79.227","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.742Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAge: 12\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIdDZcRxfgaUiiUn0yxK%2BkBhr%2FLooGghdVmr4ocVX2vp4KUhRWj6nVfW91g60v13TMwYqXmRq1LD%2BLlAdi7qYRiOj3psbwvCHMzxYS2jxQhfr3vTXJgB8fFtRzznJC3b\"}]}\r\nlast-modified: Wed, 08 Apr 2026 12:10:54 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 9e912c371b4c56ae-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3354,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4bee486fc2b7c6489d3fd576000fb2dd","sha1":"fe43e8759c41b0efd3bd962f668f581d643cecf6","sha256":"1090e85dbd44be8984dd9a2106e94dff5b9691db1920189a381ca96f803899b4","sha512":"c4c989af3085bbe0c1e9fa280bfbd48cb014d02e77e4fcb160f2a4d3fc7bfe3a0410a239afb04a50e43b4dcc0e09334e5cf9b8ec6f1f3f2a06cab973f193e5da","ssdeep":"","tlshash":"ab61db87e6630a0770175a5d3b2ec690330c6487a498cf79bf98a6a08f981917566f8c","first_seen":"2026-01-21T11:11:52.060128Z","last_seen":"2026-04-08T12:11:28.890029Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdna.artstation.com/p/assets/images/images/032/745/822/original/javier-goblin-pixel-art3.gif","fqdn":"cdna.artstation.com","domain":"artstation.com","tld":"com"},"ip":{"addr":"104.19.169.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"artstation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 14:03:25 GMT","end":"Sun, 14 Jun 2026 15:03:14 GMT"},"fingerprint":{"sha1":"F4:DA:60:4A:AA:24:5A:02:6C:C1:80:05:6D:8B:51:11:FD:9B:DA:C7","sha256":"60:3F:C4:19:65:E4:2D:48:17:D7:AD:F9:23:9D:A9:C2:36:49:CF:2D:8C:6D:EC:F2:95:6A:D0:CD:B0:DE:5D:71"}}},"request":{"raw":"GET /p/assets/images/images/032/745/822/original/javier-goblin-pixel-art3.gif HTTP/1.1\r\nHost: cdna.artstation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 12:11:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 248800\r\ncf-ray: 9e912c373c5bc272-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\nage: 6189501\r\ncache-control: max-age=315576000\r\netag: \"39ef37421ad7079820355dd784276ea3\"\r\nexpires: Sat, 07 Dec 2030 16:07:02 GMT\r\nlast-modified: Mon, 07 Dec 2020 16:07:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0\r\nvary: Origin, accept-encoding\r\nvia: 1.1 e3d4442c9380e0f8994d148c9677eac4.cloudfront.net (CloudFront)\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: VTHWSZSnlgy2wBeZFpm4-tHUDiFRudNfXfhp5EQubrsbB94ZjOPhng==\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-version-id: kiS8bf35UoRVYlB115OXuEJOKBMPkGKX\r\nx-cache: Hit from cloudfront\r\nset-cookie: __cf_bm=MZFsqW54.dHbiQEMil22f7jrFVk_cXMlhzTEiXJVBi8-1775650266.761988-1.0.1.1-tA5_q9FkMLzn4lcJcZaqx5U_TYw4xwfbOtE8yRutknP10vu_QX4uDgtkBagxXY0mTEd25iL5XwP6948Anm1zOImz1ebwN0UDx8g22dK.bfUicfcUxCPmnx9BDhz0hEsx9i8pMtTa8EoG4bl2gcFDEA; HttpOnly; Secure; Path=/; Domain=artstation.com; Expires=Wed, 08 Apr 2026 12:41:06 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248800,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 1125","md5":"39ef37421ad7079820355dd784276ea3","sha1":"2e15df455295813fd8aa88a4307d41b18e753e7b","sha256":"631c4dec5dbe0547fe9b27ccd79ae887eb62d8190ab990b3365e0eeca9605277","sha512":"f85ec3f41d2ba9496039bd386c59cd39ae825dfe6e222fb4b36fa4ab2ee48eaf2da2b35d857ca021b54add46e5c9d262cf3a9b46a66c3c1f938cbe9afe8ff972","ssdeep":"6144:0KtU4SqlQMcbs+qJk9bAWuxkQnpb0HL+mlNU4R73hloCDr:vtoqlNTA8Wokep4HL+QRjh53","tlshash":"8f341235492382604bb921e65e7ef9f3dd0e0f5c8264f1f3e459acbe1d8c24db226919","first_seen":"2026-01-21T11:11:52.049648Z","last_seen":"2026-04-08T12:11:28.890631Z","times_seen":3,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":13,"dns":0,"connect":1,"send":0,"wait":48,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"172.67.149.74","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T12:11:06.542Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSVWZiT5WomzvXD4sMnDTuGCs0cnxoSYSYTntbOfWEEu9agwVUNSPVRCpLNS6Ip4E5v%2FWSou5y9Xgqg2cgFqyRL4es%2F3iniqTs6bAru233rKtOpFSIyBz3zXFpvB8OGY\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 9e912c35ee9a23eb-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"1eac638845268fa741ab8ad26d3fdca9","sha1":"524153005052e563cd93e2298d65dcddb493b272","sha256":"159ea12a9bc840708076c61be46cae9ab34148aabdf60058e4a3612542c41e1d","sha512":"0e79b718c8bf744e25585c26aa649c2392f32227fb58ef27fe6de17a16bad018764a0f00c8417bcaf255dddc344bbca0022af51b46857485da63ffba2a7150d3","ssdeep":"48:ob2Dbs+v9cV89SRGdQnuSLde3aHgb9jzlqTYfILM0tPM04SMWM0dzM0fAM0YeM07:oKI6Sbusd1Hgb9wM6n4y7sDWQVwQXzpR","tlshash":"e302de5260f4607b41b3b0e16aa16b3e9ee58203d5660911b3ed0be60ff7f41dd73a25","first_seen":"2026-04-08T12:11:20.16593Z","last_seen":"2026-04-08T12:11:28.891264Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/css/layout.css","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"104.21.79.227","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.740Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/layout.css HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAge: 12\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3s08ZepV7Q4lv27am0jvQFDaR%2FCjh5TC2UAWlpdD1LgJSBY7ZQFtNVxhY3YLMIS55HpA85e03X6ivcyXK3YGfwRNgpBWVK5vcjX3RYtG8MMpF1nP4V5LFETKmgSiIl0r\"}]}\r\nlast-modified: Wed, 08 Apr 2026 12:10:54 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 9e912c371f035689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6539,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"700e1f3fc5851e3bf1dea0d1830a5618","sha1":"4064a6714783880a1d4f681a89d79e27e5c1bacf","sha256":"51428ca15747ba01d1b535571439eaa09d0939bf45c9aca08f012fd16a789305","sha512":"4cc4daa951deb041156f2f14b9050648bc86be3ce75eb849714818840177e9929b4752cdb1a5b90a7867a1e8bc63f9051940e8971ed65ddda72eed38d4ba0a47","ssdeep":"192:o0VWOPWlJFrYMYnxYkJkm5l8lNnXl/uqlbPccBLMFv63P9OBU:sFrYK5ca3","tlshash":"1ed121426e631946b407d95c2ffad741735ca4c3814dcab93f88a29ccf8d2956866f8c","first_seen":"2026-01-21T11:11:52.05064Z","last_seen":"2026-04-08T12:11:28.891898Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/css/components.css","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"104.21.79.227","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.743Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css/components.css HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAge: 12\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cffqe0wCAGyDjZA%2FvYn75FGd7F2e5Ezifi5UammqiWwH3gQ%2FvCCE4mZqwxCFUHb%2B1QvJ0rBKQ6jJ6TnObsTN49AFdFH6KyH67zdiifRZOc0OUpLm8LUmAiB5Yp3wg6cR\"}]}\r\nlast-modified: Wed, 08 Apr 2026 12:10:54 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 9e912c371a15569b-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6a6cfa0e82158827f6be10719a7967cc","sha1":"6c702caac7f3f7991ffbeab2a8e1bbde5c4afd84","sha256":"5287be3871663cfa16757d61f642b509ac78db589d5ac8321646eac7b3da4a13","sha512":"ff49efe2e975685cf33b4daa23981a2df19a471a477bf4d2678232e8f6ca0dd1b03c70b6f8dcd078cea9a15fc7fcdef29bbf284aa36c045b305b4c075bd41d1c","ssdeep":"","tlshash":"6341b063f9230d4270074be83f2ed6c2736d655345488638fba8e1b84f555e055b6f8c","first_seen":"2026-01-21T11:11:52.052377Z","last_seen":"2026-04-08T12:11:28.892664Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/js/main.js","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"104.21.79.227","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.748Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAge: 12\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YGYQ7wm78MSQMq8kjC1Ji7QnnrCIsPWSzR4zFl1yUvahG8YSdEylUArV20dzpLjYnOmQDd3N8ECW1xOUwbEp4AvWVYqVolzQOYlF3E6Tj1JLPi%2B5QzuJpmN3H0tOmjW\"}]}\r\nlast-modified: Wed, 08 Apr 2026 12:10:54 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 9e912c371e6256a5-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9907,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"65a1dd2cb56602cbbf3c5bf6cc834938","sha1":"9cf58af215db48c8587000fc9c8229c5519f328b","sha256":"da44927b4b0495369756b165d4214d181a71e7839a79b67afab2811b65167bde","sha512":"9d72f83461a48a3c695c53fab34c3dafc44286ee41121ab2e64309cf47fc6df2961dfe6abee40f9f105c0e5c237e545863923de30cff603f03b3837fb79080ce","ssdeep":"192:KJP/dtQNe04NKDb7cOz7euxlj588Dc6aIAkBFy2ZWfKA6OxdJS0pPHwRsAbQU2x/:204+bVz7lj588DogI650p/cbQ7Em","tlshash":"5512757820b32831467b12fa67df510a25a550a33404c589b85dc5993fe0eb0dbbaffe","first_seen":"2026-01-21T11:11:52.065213Z","last_seen":"2026-04-08T12:11:28.893465Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/api/rate?amount=0.5\u0026from=BTC\u0026to=XMR","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"104.21.79.227","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.797Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/rate?amount=0.5\u0026from=BTC\u0026to=XMR HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjKVNRPSNJkAbK%2BOhzQSm8Kbz7G1k7whTNCx%2BBDfuBHIAGu3Ng%2BuR0vkaejmygc4z1Rc5YObQhlF1PHCR%2BMuXQhStfreKtHdg%2F1GDAG9DBR9C0l0MA%2B5yQaI%2F0LfBHc%2B\"}]}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 9e912c377f0456a5-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"af6d36fd28a0942a6589c28a6c3fd1b0","sha1":"44f1671a8e684bdec5ca2c84403a00722e019ab5","sha256":"d58cee9c60261d8f4e49b067b396794b989c76960d7856e8238fdb8dd3d5710a","sha512":"38935928d02265d3abc6bcfba7fc046c9a34f9a805ffbb81113b19c8bed48adaadc8461595d9c3434e6f74162b0d1dbb4b97c815e31176bb124d1afd918da579","ssdeep":"","tlshash":"5ea001a1b2c01c760b582895ac9918657ac2010b64f489eaf7daf5357c98358b419a40","first_seen":"2026-04-08T12:11:20.166794Z","last_seen":"2026-04-08T12:11:28.894181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/favicon-16x16.png","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"104.21.79.227","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.931Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: image/png\r\nContent-Length: 565\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAge: 12\r\nAccept-Ranges: bytes\r\nlast-modified: Wed, 08 Apr 2026 12:10:54 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXbiAmGTvtbITImHncy%2FcAJ17RIiwYfBv%2F9sOOiqAW7WXfjhcgWnDZnr1IVFeLdc5giCe0ufYzsMdr8Md6MJxJo5BM%2BzStfCz%2BT1b3HZof103yDUIPaNKySdv6wJJFzV\"}]}\r\nServer: cloudflare\r\nCF-RAY: 9e912c3838195689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"ca98df5d1307269f0febddcd36d7b782","sha1":"39fa2fba5e5ab2899b533acd192c2379fc06f873","sha256":"472a4927d8d10a0553abd44c36e1e6b0cb7271319c420aef6f57f7b62d30db5d","sha512":"58e02d8d20b144acaff5fc6e12ed3805cf235a6d790c270fa0d86e1ca2bef0c893d6fdd224053822290e4e49c483ad8119a6af4ebb22bd2e532678671db7d80c","ssdeep":"","tlshash":"d7f096179321f526c0e02db7a8038c4fcc29a8049c5eb0c5668cd02b06be1f000ff6c6","first_seen":"2026-01-21T11:11:52.05532Z","last_seen":"2026-04-08T12:11:28.894842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"goblinswap.io/android-chrome-192x192.png","fqdn":"goblinswap.io","domain":"goblinswap.io","tld":"io"},"ip":{"addr":"104.21.79.227","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://goblinswap.io/","date":"2026-04-08T12:11:06.913Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /android-chrome-192x192.png HTTP/1.1\r\nHost: goblinswap.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://goblinswap.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nContent-Type: image/png\r\nContent-Length: 26038\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAge: 12\r\nAccept-Ranges: bytes\r\nlast-modified: Wed, 08 Apr 2026 12:10:54 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtUcT7nr34odnE9gy85tZRuhDemq%2Bft2mtDJkQy%2FgpGcd9pLZ0chc1Z73sGlLfQNsv%2Fa8RmqIOojZzTPuFOBaatkPZsQZFul6F5wweJ4yjlOLaFh5SIEqL3k4wK09gCk\"}]}\r\nServer: cloudflare\r\nCF-RAY: 9e912c383ff956a5-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0138b26c15209eb502627229f08f60dd","sha1":"0fd683fc7b8118aee88a76445e737a3ff21d32dc","sha256":"5901163c59a38a59677d1f9bfd6db17e63ab9326321e81d422cdf0d72f17dde1","sha512":"7a13f5cc86694c705f413039f3ad206ef313c2aafdfb2c294f5055fa49f100720b16d0e2a6c0fe92ef19e397b1742405e0a56a03105d0648630b5eb8677f9492","ssdeep":"384:Z75RAmWYaM16Amb7gutS04bVqv7Izl9j7daHRPS9aVFSqhRZjm0T3zlFFFFFFFFW:NAmWYau6AMgC/4j7EtWz+R0k3z4","tlshash":"dfc2d093412184330748452a0bf34fa9c5e5b3b8ae103d6745e88dacafd0fa867673ed","first_seen":"2026-01-21T11:11:52.067432Z","last_seen":"2026-04-08T12:11:28.895396Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"goblinswap.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}