{"report_id":"0fb588e7-da76-4166-960f-231e141abdea","version":0,"status":"done","tags":[],"date":"2026-09-03T01:28:31Z","url":{"schema":"http","addr":"swcamp901.top/","fqdn":"swcamp901.top","domain":"swcamp901.top","tld":"top"},"ip":{"addr":"35.214.135.205","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"title":"Switcher | Bridge \u0026 Swap in Seconds","dom":{"size":102154,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57939)","md5":"0d092568a493c2291a2b2b235921b4bd","sha1":"850e55c8bcba0d85bd7a58b4feaea60e372198ba","sha256":"4f196bc3e5b9b01ae15b86f0a5cc287028e130412b6fac15630070215832d187","sha512":"90ea7d90a183ce6ffa6de1c37a6f4fcf763db617723a587c15a36edb980691d3d34ec88512c39a93a7fd462a24d66991a9666231799dd586a0d6404f0069c025","ssdeep":"1536:NclmcOHsv+OhTIuBXcfUeMKiL0WNz51CN2az9:OlmcOHsmONIuBZKiL0WZ5wx","tlshash":"2aa3097b9240116932038bfcf07db665f0679d59f7818ea8b2fe1da1f7b285cb919480","dom_hash":"domhash2b6fa5ad33d9459d6a91b86b9a557e5d","first_seen":"2026-09-03T01:28:53.099613Z","last_seen":"2026-09-03T01:28:53.099613Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"swcamp901.top/","fqdn":"swcamp901.top","domain":"swcamp901.top","tld":"top"},"ip":{"addr":"35.214.135.205","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T01:28:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":6573,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":3,"received_data":78291,"sent_data":1746,"comment":"","tags":null,"fingerprints":null},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-08-28T03:25:35.394594Z","alert_count":0,"request_count":4,"received_data":16004,"sent_data":2437,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"dynamic-static-assets.com","ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":62467,"first_seen":"2023-06-27T20:50:44Z","last_seen":"2026-08-28T01:58:37.045728Z","alert_count":0,"request_count":1,"received_data":788992,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"swcamp901.top","ip":{"addr":"35.214.135.205","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-03T01:28:44.714819Z","last_seen":"2026-09-03T01:28:44.71482Z","alert_count":0,"request_count":1,"received_data":243,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"switcher.finance","ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-03T01:28:44.717109Z","last_seen":"2026-09-03T01:28:44.717109Z","alert_count":48,"request_count":48,"received_data":11837896,"sent_data":22576,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.dynamicauth.com","ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-24","domain_rank":1824779,"first_seen":"2023-07-05T19:07:58Z","last_seen":"2026-08-28T01:58:38.256264Z","alert_count":0,"request_count":6,"received_data":20778,"sent_data":4465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"switcher.finance/assets/metamask-onboarding.es-C6cRrz1g.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6b280cc68c71b8ed66ac14e78bb6ffe","sha1":"c1a25e5c2671c0a6b1ae3e7170cfe1d2d66e6d43","sha256":"30e8099e5426c37f4a33f3d85853662bfdf9d0b866089c848431e9c2d61d61be","sha512":"a01c9756e02e791cbce6059bbd683e1a1d769057826fc221aa5d26884473d08c87c0d3e4683a332492c27221f060b4e75953628ab5bdbfd2c498191fe6f2ec77","ssdeep":"1536:RDJ0Jb2R3ZJZGI8XFPvXmWYfdT5njJa4ILQ62kz+91hGTLkIZ3qLp96Qna6W:hJ4EJvGIIFPv5YFTBw4IziwLFZ3qLP6B","tlshash":"18934be233e1b02603e658e4519b1695f23a15651c0d0578f578ccfb38a099af6bbfbc","size":96291,"data":"","first_seen":"2026-09-03T01:28:53.143147Z","last_seen":"2026-09-03T01:29:56.622381Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a2b3f34eae8c07e88bb65ee523fac65","sha1":"1d750c13d111925487f1564ac3a7ede9ee13d175","sha256":"186ba6cba0f0ed8bb3eef1bffc891faff121c68e2d5994e51a1bf5ca830c4793","sha512":"78105a7effc7d5174e416f882fad29e8028bfebffe80502c22d84078b300323596c6473d47aabebdb397481e0e1b50ad3aeff5873c70dc3bc5f97242a7a0b329","ssdeep":"","tlshash":"91f05c3a5ed004355b9fe56c647d5f083438000e51b2da0e763d92b04f90f6670739e4","size":497,"data":"","first_seen":"2026-09-03T01:28:53.18495Z","last_seen":"2026-09-03T01:29:56.631832Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a420f5bdfb3fd47deffcf9210ff9b835","sha1":"3275ea9feb08e4259b004bffc45810c8305f59c0","sha256":"1c950cb94de064a2d65c63508bc271466e58b05813318edb485718dc0d350287","sha512":"084d2366ed9df9106467a91ac214b2cbd9c783a0492a6734c5f521460830c9ab50b3a262c2996dc876f542256c8f8f0a3c814327788749b2bd23330afba062b9","ssdeep":"","tlshash":"1f11df5e89fb34565aa335bdbe0fb14935b44027468ccd207d0cc7905fa123a16b2b8c","size":881,"data":"","first_seen":"2026-09-03T01:28:53.186173Z","last_seen":"2026-09-03T01:29:56.632354Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-04T06:55:20.796096Z","times_seen":198564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/link-C6x3VlaK.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"280edb839e8d48707fdae59b519fc8b5","sha1":"300eb26c39b16713cde7b1ebd826d6378eca8ddd","sha256":"416091bc09fcc3c863f823254ad26cc7ec857c52b7659e3ac1e72a3e17ccba42","sha512":"6c73b07faaa716a859b94e16c32cfe8e9fdaab728173763fc4e12e9dc77b8a464bd2d0c00186b5ad8efddaed0290add5de69a96f8e39ad34b4b7a0d988031c79","ssdeep":"384:3Pem25dig9a8owbUbYsaxwhuOkJuVOj2sOiNL/rijUL/7:3PQig9hxwEOkZZdTgULD","tlshash":"72a2c7f63296f0aa47de12a600ff5055f3b94da5280d0128f1b499cb3871658e3fbf66","size":21659,"data":"","first_seen":"2026-09-03T01:28:53.113503Z","last_seen":"2026-09-03T01:29:56.616241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/getConnectorClient-DjveJ3zd.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d2867276995a62c4a606fa12e99da1f","sha1":"64f9b94011e25c444dcdc578192d1224a63a6fa2","sha256":"e371277d32ee18b520beadc62a4695b3d6102b4e5e7653ebf4ad48b9aa2fa4c3","sha512":"3cdfa7544369143f4c52e63db7844a8dc394ce9fa961c3816233197a52bd5afc42df22e6ae6c07d65e2ea02b1797161e9e706c80faa93d838fad2e32fda01ed1","ssdeep":"","tlshash":"6811adf005f5757dcb47280ca080a219416185dbdb59025c2f92842fdaf83c9efe8f9b","size":1059,"data":"","first_seen":"2026-09-03T01:28:53.169297Z","last_seen":"2026-09-03T01:29:56.607202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/TransactionModal-C1cd8TS9.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2496a17f03cfd8b9060271bd4d23ff62","sha1":"0834ca563ff7b278ed59232f0b1ae86c3c58c169","sha256":"f8515c82f19cebdc2ef36b640defb4b87d55b116d6ce3b29cc48dbba40b4163e","sha512":"6dd3f2e5822cde783e1d882bee952fe64f8fdf1eb6ae8683a723cd6053172330c03cb6983e3f75685a342722ce2a2fd8d1d5cdd48b970409aa08bf816db689e0","ssdeep":"768:R4+Io7L+i7XFY4t913VrTTGa3LN+8H/7igN8gNyI8Gdm5/k4d1b2bw:R4+H7XFY4vjTGa3BLH/OOyVGY","tlshash":"7e13f8f6b3667178e6a6041471cb9118e22fd795cc1a00bcf2bd685363e9484eed6fc8","size":42183,"data":"","first_seen":"2026-09-03T01:28:53.175128Z","last_seen":"2026-09-03T01:29:56.583994Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-09-03T01:29:56.630247Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-09-03T01:29:56.637013Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-09-03T01:29:56.627145Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-09-03T01:29:56.638827Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/ConnectWalletSlideContent-B_B5c7lC.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0990aaae0846fd26ede1d14896cad6af","sha1":"4f24327862aa52e7ef9341f0efa990b0ea45a937","sha256":"8f0e5fbe2dd0f375b9f2a270172e6dfa509da4f9041b4f36a617c46ba7bd27cb","sha512":"6972b775d23aeeda88a8f6d24b28b5cfbef7396c4f71470d24228d8f563ac70e8f76e11c523f992452cf81a4ef17cb1dfa7ddccfeb03e3940266c9df1e9595e3","ssdeep":"","tlshash":"3731ac1ee111e6fcb4775984606dd08e328ef028db1e5870a2ec763629450fc7d5abc9","size":1757,"data":"","first_seen":"2026-09-03T01:28:53.141619Z","last_seen":"2026-09-03T01:29:56.611867Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/SectionHeading-bcKsb0o0.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a592617fc74d247b75cb188a3da665ad","sha1":"a64d563995ab4e2f7b74b0d39fb41f7dc95d598b","sha256":"a0d2fdbc757138c42f697aca2fce1f77328275df7f93a1276f0071ddf9c45da5","sha512":"717ea5feb6854fe3be02c7e61af9c97403bbe358fbcf668d3367632cb82f5bb6e70d0a4208776d1021b3146468023efd9f827b3b2bf263855ab385905071aed8","ssdeep":"","tlshash":"5ef0200a50417de4b1070ca061ac821af132af4ccb6b83a576f4a92202590c0bb26fc4","size":533,"data":"","first_seen":"2026-09-03T01:28:53.130452Z","last_seen":"2026-09-03T01:29:56.62607Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-09-03T01:29:56.633625Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/Web3Providers-VHsipBgf.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98c57794646bfe04126eac0341b3e0de","sha1":"30912f7edf3dbcf7ef8e0f2f889acb4f35265136","sha256":"65add80b8598bf53b2c73480e8892df28de71d18e7b07f4caeb5e4997ad4651f","sha512":"39bf6657d90a2db901719069881098708e10bcb5d579d95ccbfb3937bbbf9a3619954e97b71b6efdd8a8704e1f15fb661cb0c7f69847e3148fa148a7667a73d0","ssdeep":"384:nSwWeiGv6vsEXePRg9tmjC/TV7uyq/IZbnF3XVxu:nSwWMyZePRgSjC/TBuyq/IZNvu","tlshash":"f4a2f9b3b387f011777a4019a47ea761e11a5c90b84c0d2cf2e10cb5a7b264a75e5fbd","size":21590,"data":"","first_seen":"2026-09-03T01:28:53.164104Z","last_seen":"2026-09-03T01:29:56.583473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/wagmi-config-CrnY4DRp.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9b0c7fb17e4c0dd4080e9a3d39b2568","sha1":"2e38378509256c4741cb3f1f5a16b9bf91c7fb4a","sha256":"569af7d3adf4e73a509a6ceaee7cd98f9dc262beb3290cda81c728036351c0e4","sha512":"f7002b8b3ae29778fd6a3b42c1cf2ce9da3c66c2cb13f19827ab931c16c0d98bbe2fffc9d5d26c12ee8995aadbcc3eb4275aed57fe1caf6bf628dfcabe456eef","ssdeep":"384:9BzYOka7dSmXpeZwMrwW1eHGGbc/YO9vyaXbbCOhn:9B0Oka7dSmXpsjrwW1eHGeeh","tlshash":"2192f7f232d2b1715bdb108d34995008f22c89d8b50d002cfa6189f6a5b9ad7d7f6fe6","size":19796,"data":"","first_seen":"2026-09-03T01:28:53.173422Z","last_seen":"2026-09-03T01:29:56.587894Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/routes-CqRVhX8u.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff25a94dddd5ca591be394a7a64cfad4","sha1":"6be98ea392c74cf3437e11286659b76653d0a543","sha256":"17343faf0610abeed92a24f0ce277e2570c00f1a855189766adcb5f9f013342a","sha512":"cbba0c4a8049f3dfea43261bfc74784b0ad155a3e0921ce536979c10d7a86e73449e1363516754eecaa70d61d3acb34c73a49cb77bb647c5961290b1f901f5c5","ssdeep":"384:dPCFVZ3Ua/uuhir4w2CUYJxxagOP0nRTCaaEeRl:dPC/2XCir4w2JOxagk0nRTCMef","tlshash":"da924c5e72003438f75f4a49a46bc20db73ba2c4e107886cb17c782a19556f697b2fda","size":21196,"data":"","first_seen":"2026-09-03T01:28:53.159561Z","last_seen":"2026-09-03T01:29:56.620302Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/connect-solana-Cg7I_jRP.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45ec5330bf678405fea14af0c2c1db67","sha1":"4950edcc09cf51b583a60c24e5c34917ced78856","sha256":"6ed297995474e3afd30233bae0fbf3050eb59372c83cb35b722db4245c6dfe5c","sha512":"77b321c7fac2f8c679aff74884224c3996e67ad9a93061d442b917fd8d4a135c0657ec6613269ddb664ef913eedb523dd48f397e36637d647303d9b3fa402e3c","ssdeep":"1536:SHB6/5E/Gqb9/lcZ12emfEZ86fK2mxC6DX4m1uUNFtsyzY53J0vZJ1rnwjn+xtap:MME/GqbBl812emfEZ86fK2mxC6DX4m1Y","tlshash":"fe7329d9b343f1310bfb9665a8b64104f33d9498280e443cbaac09dbbab5445d2bbf75","size":76586,"data":"","first_seen":"2026-09-03T01:28:53.120249Z","last_seen":"2026-09-03T01:29:56.611277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/index-kLr8pJB_.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"285853df36187f39c4ec59f437f02e94","sha1":"ef9b31a71408f677b56a6ec3a4884ef85150341d","sha256":"e222f751b19b232cfd175d64c5968f13c02e73db63ba51c687414d015e368331","sha512":"27f83d10476b9d5eb84352b8b9b46450b30d4198b0eacfe36000460bf3e29ddddd1f1e4a1674e8307ac58df0c25e80f8a6d15fd48fa5ebe4dba305295bba8c85","ssdeep":"6144:DceHqQXsWn2WPPllI2j8G2hrqyAOojVYdrBPhM93ON/REQMVkBeZuEojU0OZDAlR:gHUfqLhL","tlshash":"70846ce9329572616b9783f5402f150bb33a18766c0d4424b234fcae77b1489a5fbfe8","size":388779,"data":"","first_seen":"2026-09-03T01:28:53.123666Z","last_seen":"2026-09-03T01:29:56.587347Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-motion-CiBz2xZv.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8006b325d12401d364f7be2b39fa2c2","sha1":"f949af75475ddbd0b948d6c64bcc6e30552a3ddd","sha256":"a13331fed8e47ad98c543eade61c00274343bdeb4d871c130dd289804015ec65","sha512":"2fb7b942cae0d7f93a419954f2e1b6429ad7a8ce40e6a08c1145e6fa6a380224a2eaa982148802ad1e1491dffb01c7c326383f9feedb916181034e007b9900b8","ssdeep":"768:9AQsSVS6i7FUNrxZYT/YggDX9QkiwgzamWnNWIcZrgYN6zlxPWna9NsN9DV40Rj/:DVlv4lgDp7gzd0oI0GO9e2jyi","tlshash":"c293f7d63391b022c3df9266c0af4a45b33759d8180d403cb639a9db39619096bfbf79","size":94486,"data":"","first_seen":"2026-09-03T01:28:53.138621Z","last_seen":"2026-09-03T01:29:56.615606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/transaction-DQ7Z8YDD.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0d4f6226aa523beab38de95731bacec","sha1":"b56bcad988bd7a3ef9752b3fff61c77c879f9891","sha256":"975b729d9ee26c4834e260bb7681e056d5385e05e86b0d9c7456dd38f172ff6a","sha512":"418f30d5c987ba780a1fb8dfa8481db7973a3082a354006994525b5335b9177831f8a11ffabc197f02b4fc71cf27aafd7fcc5381ea4156ff9f8ee1842c682eca","ssdeep":"6144:VgHdSs1a1RaBcQut8ptuBXWPzS0g1S0i/jlY+uyxNH/96ylpwwqvHgmn7U:VgHdSs1a1RaBXugrGSD/jlY+uyxNH/9x","tlshash":"fe440a96b755f06283da50a640b65005f33ce8a6448c481cf164acdf3af5ad4ebfaf39","size":253707,"data":"","first_seen":"2026-09-03T01:28:53.16783Z","last_seen":"2026-09-03T01:29:56.610033Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-three-fUcjcq51.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"282dec3e99b4a6618fe02fe02a318bfb","sha1":"f018c0827713242d2368bd9eae8c71a1216e9ba0","sha256":"ef1a065abfea5378b8808cee14560af77044d64a80230f543848db94737d7356","sha512":"d50246f3e6b56da0d94c396de39a32724221ad9e55a003907542d89e9746c51a7ae12c80042928fbabfc880cac4db2b6a9de19b59f2b04279a62f44af91a3bf3","ssdeep":"24576:L9BINbhJ56mscAmhOuEMwbMaClWaZ+HmC:HINbhJ5hscAmhOuEMwbMaClWG+GC","tlshash":"f3156be5737570578b5b90ab547a0042b339b8972c0d852c752ce8eb74a0849b2fffb9","size":882907,"data":"","first_seen":"2026-09-03T01:28:53.140458Z","last_seen":"2026-09-03T01:29:56.610661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/dynamic-labs-CNND8iW1.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c62ddcf14d824f6f750947f128b0cec3","sha1":"836279425b33630d9983445b5dfa0def9444cdc2","sha256":"64129791a23c16371f078a9f3bf6097bb0dbdfca6644cf1e1698c117df7af7d6","sha512":"4fec85c93bd971b87fc016813eb9cbcf3f82cf74427a8a7b0f415ff06f5fbc31a6e71de7622927af8aa5746b1b98cda0c565a5be37c7673f0d9b3f6b5f82fa8f","ssdeep":"98304:kOZ1xezMfoB09JiRDX7UGNNvrI5nnZiv40ZjEYPzUfXGQeeRUtyQgUenU1o:izUDRUtdwnU1o","tlshash":"df567de6b355b061839741a6947b1109f33dd884dc0d002cf6e4d9eb2af5988a7bbf36","size":6280155,"data":"","first_seen":"2026-09-03T01:28:53.196578Z","last_seen":"2026-09-03T01:29:56.629396Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-09-03T01:29:56.634738Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-09-03T01:29:56.635338Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-09-03T01:29:56.630774Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/motion-lWrR49Xn.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47e0d1414cf44c8c4f4771d8369d4605","sha1":"283d93ed6f9a08efd2f9b984f1064de3496def7f","sha256":"395ebc1454d005ee6c0dd419dbdbfd83322b0400663ee2e73bc0aec6284e4da5","sha512":"27df55094efd3daa3eb95bfbaf659353e625171171222c9e6a03810d978d8dbb5b317d78cd7eae2625e51c655e0fd4e5fedc3c4efd11eb471f099d950e16f33f","ssdeep":"384:woleSql52nlut8bj8rRPa2DyEJut98RIRn7ACoqONq5:wolklKuaQ82DyEY8RIN8CoqYq5","tlshash":"2472e7eeb34bb23143ef506df0878124e63a49a0d42d0134b19ac49e37ad98d9b67fd5","size":16608,"data":"","first_seen":"2026-09-03T01:28:53.126671Z","last_seen":"2026-09-03T01:29:56.604658Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/useChains-ChWoeBa2.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2ab38980560a4122932cf205bb9711c","sha1":"b461c7d4a075ca8540ad893a0d3b4f062fb8f2d4","sha256":"22670b84252c11afe633125939c9ef9ee48f296ee7edc8c785ed1b78bdad4a21","sha512":"a9e465b0350fb8f5a7fae3370b54726157ce2e2b22aa3f99c656671675853b8cc9b56f8e7e886eedc84ceb9d5303a61cb3786566e8cba6fad44c0350b5410b73","ssdeep":"","tlshash":"ec1161ce7080b5b5d7800099c08b71475268a5f669c54a3cb0165e2e2e200c9d1b2f5b","size":987,"data":"","first_seen":"2026-09-03T01:28:53.149481Z","last_seen":"2026-09-03T01:29:56.603333Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/solanaSplApproval-B49wU02J.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5502efe2cc876a36532c9018ae75805","sha1":"160225640df3d697b94847eb12fe25d33eac00f5","sha256":"cdb43a1a43777dbcb75dbd6eeb4cdbb30a8979d10def22851e11c9419c85be43","sha512":"c381ec583dd14a27258636a1c30f0408a16f729fa3151480da608e560349e86a7af98e56ac507749d1c1256b5eb388c2d923673be24b39f4a5846496f2559ca9","ssdeep":"384:O88Iu3BtazZNm+q6yeWKpYIMREVvr22FMrpRg5Grl/q:O81RzDm+91fpYIMyVDKpkGrxq","tlshash":"f682f7e0b397b17287c951765056a10dd02edaa5dc6c0556f2ae6c2333e94c4cefbf0a","size":19307,"data":"","first_seen":"2026-09-03T01:28:53.116788Z","last_seen":"2026-09-03T01:29:56.596375Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"509ea6f032027b7b3816bfc3a32b6274","sha1":"a2c3c0a55d875e2fa2c262e85f45ef25dd24ce51","sha256":"306243130b2109ad9c0b0ee60aa667b5917252aea94f06497ece2e6300893819","sha512":"a65b8f950802391aca2c620d79997a60012eb1463fe6e6287ef6cc0776dad1589405a8edbddbce06cfbc7350bdb0971694e034c7141d84b806163779d2e7175a","ssdeep":"","tlshash":"4951ec3f853c79062c1322315e663de18e9009e63539b0f22d772020964bd3c76abeee","size":2566,"data":"","first_seen":"2026-04-12T18:12:06.80311Z","last_seen":"2026-09-03T01:29:56.63133Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/secp256k1-Cr6jnE7B.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a27e54eca21726e4e309032ab71720e","sha1":"12c6bbf9ca5e338e364dcea56d8c015ebaee8f57","sha256":"8e5d925a69148d485ccf5fa210a5978fef41dadf8949b3033583cb62389ceccd","sha512":"07533129089616997caf016e01d7e6a9bcd1001eeaa212b9730e1afe51ac49dae8eb29c937397303031d98be9588e7bd98639ff359d700d16ccae1fd5918d897","ssdeep":"1536:tpLwzx5s5IfCOHSsvD/gzOO9OkGKOvoxnYiL/opTYWTEIuhOVE:tCs5/gP0evodY2/opTtvE","tlshash":"c1531ae177a0b053c7a640eb447a5006f27dd852588d090cf2b4e8fb7ab58ac95f6f39","size":61890,"data":"","first_seen":"2026-09-03T01:28:53.148483Z","last_seen":"2026-09-03T01:29:56.614895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/addressValidation-BfuTrPtj.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"198c8f5c8d0c99023e5ae89baf189fe7","sha1":"38d63e26abc6de03a748729dbe0d9137593ea814","sha256":"f5dd50489bca360de19244b4cbc954e69811ff49243459da091d4416a6e4e6bd","sha512":"7023ff0421096cb16a8a1201ab0c92728117e721f9edbb0a3aecdfb74b08e09df382247158a872838e950795133e205386dd131fb25cad5b427f746854fe79b1","ssdeep":"","tlshash":"8711ef9ff1afb0f8dbc8c45b21998546f6ac0559cd2c03e980320452981f069eba4b88","size":1041,"data":"","first_seen":"2026-09-03T01:28:53.118694Z","last_seen":"2026-09-03T01:29:56.60525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/rolldown-runtime-zSbnoVup.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9049da640bd064c86bc9864dbf50d1d","sha1":"edbdb8249a3279bcccaf12c2ca0eeb35d41c914d","sha256":"0c0bf430afd3b71beff576c47908b01139baba43f826f93f587baaccb6e3a378","sha512":"e4404f0fa54f5d9f250988c4e8cdc95745b7eae2a14143d4b9492bf1c2925b6ab81f924fab4ec698d7cd945b81a7abff52c5d143def38e658b0d8f91ffefff09","ssdeep":"","tlshash":"c82195ef1ac0f2f2625653c1e62d5085e365f43d9a7c3090f3684af165c10c511c5e76","size":1273,"data":"","first_seen":"2026-04-25T00:40:33.613618Z","last_seen":"2026-09-03T23:19:51.409247Z","times_seen":384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/utils-DVnvPSiV.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1366e44f5d8b63e8dc7e98022af54d75","sha1":"aac234c76f7f0ea2b723b31a9e48b0f5918e4863","sha256":"19f9bfb80e3abca5a4eb1dcc6389a72c22884b6659302c847079ebcd65fa434e","sha512":"29250072d1e54523d123b3de0687662fbf5da5f121100a7b5c7064464fdda174410193ef6307cd1f92b97cc501b74aaa082a032c0751160c87821fd38a8d7145","ssdeep":"6144:tU/q2arv/MCtfijaDL2CbbB7EIbKg52m13U5YEOFFZfqVfUCfn+bnDl2Rn3U+QNp:NF+lCbbB7EItEOrWsCfHw0C5","tlshash":"1e15f68472d6f562839114e0063b680db33daa9cc41c6258f398e8e37ef96d547abf74","size":880135,"data":"","first_seen":"2026-09-03T01:28:53.152679Z","last_seen":"2026-09-03T01:29:56.620853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-09-04T06:41:31.397492Z","times_seen":400522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-09-03T01:29:56.637513Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-09-03T01:29:56.626653Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/utils-DBxQ7GIT.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b9421c8ddb9da1a9450c4831524fe40","sha1":"678e0a44d93f3e17ab053f7b49f2befa27d4c23b","sha256":"0bbb4cab261dcbdef6d32cd21cbfc97194350fcdc77bbf690c96b7d5912dfe2c","sha512":"164fee96f83ffcdcbd7946ad7073651f9670438eb0ca66dfae99d971b416a80cf6d0c434929dd701cb0e852e51aba408cddb62c7e4f61e0a24b7982d0418631b","ssdeep":"384:WRBqOkhcG5QpRYxECiciuUOvRHfitiTv7tj0h8TJJoV:Exk5QpMiciiRHBTa8C","tlshash":"a1c2c7237513252a26bfd667e31ceacdd9326702c60acb19f2420b309779bf15695f0e","size":26149,"data":"","first_seen":"2026-09-03T01:28:53.162894Z","last_seen":"2026-09-03T01:29:56.586822Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/proxy-DfIhQ7Ou.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6573770d24da44b37f4c767bde400b40","sha1":"79fa89762d19f84659bcc45aba0593e2f4566c57","sha256":"f002cd244ff0bb3a0a2e1fb64c469f485688c9758edd79d4335fcb9dd49c2dad","sha512":"2542d75331df30f6be7c3d83dedff40c9af494bf97d6a49d40e3db6004ef1d2c649477011b6b953b5ddf3e77fab4bcc4da54a5e873620b73e2cc87c777c52e4b","ssdeep":"384:LSc3gwJ7g4jENP9IX3OBQ1GZDmO+eDA8Eus8nkkCJqV5bM4S:+c3gY14TIOBQBeDfDnkkCJqV5b/S","tlshash":"60d2e79933607631d3df802e956b5b00373b20d97899802c393e99cf15b1a5992bfb7e","size":28454,"data":"","first_seen":"2026-09-03T01:28:53.145338Z","last_seen":"2026-09-03T01:29:56.606056Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-gsap-l3PWEo_4.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0df65b89360c8ffbf57e4342cc15f3","sha1":"cc505b12a6d821bb64c200dd4a31bb3c669a49b2","sha256":"41e31db10363d6a9255802898f47e07a407793066ee19ae9f57711e3083eca57","sha512":"37e13dcb61f65fa112f90ff9fa31580b7247a701b4f8d9cc69b18b59684af492aadc4bb44beda40083959c6374a6f489c41f4fbf297c82a00944e609e14a9c96","ssdeep":"1536:0K1MI1eNtTYh6HS0nv/Vt4p8Dp//QPdKcm0eQ771qiO66JxsNjHPce385C5:VMIQ3TYhUTB+PdKc4Qf1BTBPjMc","tlshash":"13b3f8ca3282b062179bb2b1443f160bb3379994680e061cf129d5d83d3d999977bfbd","size":112819,"data":"","first_seen":"2026-09-03T01:28:53.183393Z","last_seen":"2026-09-03T01:29:56.616827Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/GlassCard-DmLHIH8d.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b688bd80562bd95059e90bc2c401ec48","sha1":"35dd1e0e74412a46eb5211e0ab3396acbec8f2bc","sha256":"031ba70c0638bb03fea6e445fb3c2ac15375adfa60cdc5c624cf725a2e9a15bf","sha512":"ba4a0c9117fb22e9f55ad929c432d30941de9541a8d07419a2294d3343a92c289995bd785f49b758f1ab1a1ce602210bd8d3a7274009e2c1e5a81f8dd592bef8","ssdeep":"","tlshash":"fee0ab9551856dbcbe1f06ba921cd6ef7136aa5c9589431995c2692403105f1531e888","size":416,"data":"","first_seen":"2026-09-03T01:28:53.179864Z","last_seen":"2026-09-03T01:29:56.617567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/use-transform-4uIeBv_c.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e25d4fea20d8d2ab7a18450ed38ba064","sha1":"24882753fab472e6290b214f96a3c8a42675755c","sha256":"81926c88d6f2d43b386524ae692ab06c83af832b17769343dfc0d3274d6b7274","sha512":"4acd85da60e6008ad5679462ffeef78fe9e5f23cd119938149e38cdd4a66dcbee2d6313a7b310fd2be7dee83c9430c60f24549231351a5c182fb10a918c7f6d5","ssdeep":"","tlshash":"0421fedc72c3f070e75992a5c06bc568f63a6865144d422cd19828fb362019ac6ebf3e","size":1308,"data":"","first_seen":"2026-09-03T01:28:53.166817Z","last_seen":"2026-09-03T01:29:56.601011Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/SwapInterface-C4qJEAIo.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b5ef6ae486828e7f413b647bd0d7539","sha1":"0af03c3239cb5bb35bd5464536515fb1da105f7a","sha256":"34aad0d505dbf5c2c7a5dfc5b5d7efbd1f82595b4443a4382bd86fc08e8318c7","sha512":"c17c88261d42ebd88f02b685c8eacdacf3842229616f17c72e1fefc441bbe9b4ceb8201b79c286cd4d1cc1ca6f4d5b453b784dd1beb835ac01f472846580946f","ssdeep":"3072:GYlMi9+uq0WtNnfJZjhX1xonpFooePhJeq:GYlMi9+uq0WtNnzFouB","tlshash":"84c3e786f3813de8fb6b0594509bc11db12f8bc1c80b847cb6b978552689486efe6fc5","size":122674,"data":"","first_seen":"2026-09-03T01:28:53.11482Z","last_seen":"2026-09-03T01:29:56.602781Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/thumbmark.esm-u2wUNe_4.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c2c1ba2715964a44586fe47499f745f3","sha1":"dc56fd55f384110ff6897037454cb7fa86a13f72","sha256":"df20504d3e8e5c1b6deb065bcfbbddc373717e21b45fa3cf6d16f8e13d520c66","sha512":"5cd3ec1e1c455823207865323030a9316060b13131acf1bca1c3812cb704c6f74dd5bbd0243d402ac56ab6656f923e63e546112486a02e8b7e0a242b5c4b2c72","ssdeep":"384:Dsz0nbOmhi9KZKqRxRb/9LCtXdbxKvhYKQzFf4nW:DszSFLV9Gdb8FnW","tlshash":"5672d89cb2cab0394377b53a106f114aa6377560751f8801f026d2827ef995e933feb8","size":17464,"data":"","first_seen":"2026-09-03T01:28:53.147488Z","last_seen":"2026-09-03T01:29:56.607849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/connect-evm-BZGEuSWx.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0ca39500490c5d9c9e04cdf595341eb","sha1":"3c72a9f1119517cc57f9d9e0ca21a625440f13c5","sha256":"770373f98e31a67fbd3b41d7457c0cddead56b15ed7ce416810cf57b2d224a36","sha512":"cc38a4793cc18a2ccc1acdae58e725796857dd18088194d4712a83e058d5e0390de2b80d8412efa4ca494886f50dd85a881e85f0d39cdb12012dcfe789f00ba0","ssdeep":"3072:HP5a9Xq+vZcAScrJaTEwMzLcZNeEcOk91i9OsxdNlQ9a08d6F0qP6X3Popq9dkmp:HBCXq2Z23EwMncZNeEcOk91i9OsxdNlL","tlshash":"ace3d4c872d3f06193ab6675407f440af3396c94280e4428f668e5debeb9549c2b7f39","size":152721,"data":"","first_seen":"2026-09-03T01:28:53.131532Z","last_seen":"2026-09-03T01:29:56.581385Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/solanaRpc-egLCma3x.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a099cffeca5d811b32784e3d854d18b","sha1":"44ba2c9b0c0ec8e2194b70a3221b60fc82f9a152","sha256":"e2542d34ef32f0977c00d87a617e95c46fc6e912f49b01f673cecab3cf4b1fe2","sha512":"b71fed28c5201c37a021e76133d28de7baf81b2569ef215ccdb9e364968942e7be6561aa232bacb09eb290a10111efe28a7edaac9b6e4d3a2c4b202ec0980138","ssdeep":"","tlshash":"1021ede7f17efad852d244663421c800d42bb458a72c41af12aa5491ed371cf91efd1b","size":1352,"data":"","first_seen":"2026-09-03T01:28:53.161556Z","last_seen":"2026-09-03T01:29:56.586226Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-pdf-pk4LuyeY.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3591b5d707a2ec6fc46f9578034e3889","sha1":"9dc8ac449dec405dbeb53ee1632f1415fa2e81cd","sha256":"c6492e92125e4a4f2902f031bc16c507cb37590a3efa4d4a2febb1c1dac5a9d4","sha512":"1a007ede7f6454304ba9fa45ce786bbe1dfe02f7b786bbd67d58fe37e42c6be6f427ce8a7cf634cb64b6c1535f4d60bb9fab2986907aa2c95ddfd1acb34ae76e","ssdeep":"6144:gI2Kv19T4mvkBuclD5hQZzRHnAb/nNJr3vs3V1R/x:8KvbLkAIFhQRVAb/nNJr38V1hx","tlshash":"0b9429f333557436a3d982976cb80102e3266895680e482cb56cacdf299bcc572fdf79","size":419449,"data":"","first_seen":"2026-09-03T01:28:53.128913Z","last_seen":"2026-09-03T01:29:56.598861Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-09-03T01:29:56.63411Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"82231d38f8bf3d11c41ee69f9c71f6ae","sha1":"776e3ae4179c16def43495889c188c4bcd70263d","sha256":"ae5696f5e90d40559e00610fb7d341c7f011eeb9d5f8ce6b23af482793355d51","sha512":"7b239a6966f90c71dc98e3c774803958079afa4b7250ba857efb4c31d5637ccb34f96ea8ddb5498ebdd9f42b6c7d127b379f57378de7a6b5fd71e57f416a2f41","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrX7Dnzlyo9qYYM6d37oMeV3FVZl:FHeVWRK1GfRGW4dsLsjU","tlshash":"68429e0f0ab865022a6364345e5d18d4ae208db7332968e53ead10645f9bd3c3bf5ff6","size":12757,"data":"","first_seen":"2025-12-15T21:06:47.365411Z","last_seen":"2026-09-03T01:29:56.632923Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-09-03T01:29:56.637985Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-09-03T01:29:56.636539Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[DynamicSDK] [INFO]: Warning!","filename":"https://switcher.finance/assets/dynamic-labs-CNND8iW1.js","line_number":42,"column_number":3352},{"level":"log","text":"[DynamicSDK] [INFO]: This is a browser feature intended for developers. You are reading this message because you opened the browser console, a developer tool.\n\n1. Never share your tokens or sensitive information with anyone.\n2. Do not paste any code you do not fully understand.\n3. If someone instructed you to do this, it is likely a scam.\n\nInjecting code into your browser could result in loss of tokens or control of your account that cannot be recovered or protected.","filename":"https://switcher.finance/assets/dynamic-labs-CNND8iW1.js","line_number":42,"column_number":3352},{"level":"warn","text":"[btc-connect]extension attachedmap[actor:server1.conn0.watcher17.process7//obj81 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[hasConnectWithInstalled:map[configurable:true enumerable:true value:true writable:true] hasGetAddress:map[configurable:true enumerable:true value:true writable:true] key:map[configurable:true enumerable:true value:phantombtc writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://switcher.finance/assets/Web3Providers-VHsipBgf.js","line_number":1,"column_number":10268},{"level":"warn","text":"THREE.Clock: This module has been deprecated. Please use THREE.Timer instead.","filename":"https://switcher.finance/assets/vendor-three-fUcjcq51.js","line_number":1,"column_number":7452}]},"http":[{"url":{"schema":"https","addr":"switcher.finance/landing/bridge-intro-bg.png","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:54.033Z","timestamp":1788398874033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /landing/bridge-intro-bg.png HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 27 Aug 2026 19:20:28 GMT\r\netag: \"6a908dfc-158dd4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5efE8se6buu2b4FxD8Vilxr2VdG%2BhfdzGLCxiT%2FmcYLu8cipcBvA2CZDa8EN%2BwUo%2BcwQ3OPMcmz21SAAUxFiacTItLUgc%2BL%2BI2QpiZrWYi%2BplxbW98SgQVQ7PLUTZ3zDPqxJ\"}]}\r\ncf-ray: a350f982bc275685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1412564\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412564,"size_decoded":1413410,"mime_type":"image/png","magic":"PNG image data, 1920 x 1020, 8-bit/color RGBA, non-interlaced","md5":"f650015caaf46fec3daaefe99c745fed","sha1":"7e2010bcc8ff05f74b3f795c8b5dc6054bbca600","sha256":"c53434bf8e6761297e259df859d6ac970139efcfdd900881192c046d33374073","sha512":"da8f1394d0655455dd1d2ff73c12bd330d7f0549789facd98149c3f801969274b8cc4d1e7e083186b98f732bf172e40732b85ccdfcd3c18b48f9d9a421d8b80a","ssdeep":"24576:WVtPzeImFPlwy2DPx+LJjUHta+tXtU9/gRGTe+qe6iOua1FF/kTVeV8:WPPzb452Dp+EM+MZg4ZDOuaBcb","tlshash":"7e25336f6a720bac0effa22d189c253c1e959d9c6db1f0492edf5ee867131193c6c448","first_seen":"2026-09-03T01:28:53.102696Z","last_seen":"2026-09-03T01:29:56.608995Z","times_seen":2,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/link-C6x3VlaK.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.089Z","timestamp":1788398871089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/link-C6x3VlaK.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-549b\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2jKEOxTs3wcYoLuLfrSxA%2BEni%2F0MDTnopZmU89DFNJs4pvqtqYaMkKlj9SRDvlAvvT51DSJrfseAbEoqNpiZ%2FdebOq0zWXt8ae3lNwbWNSVyuo020OAtPDyJBq9wFRHZRV%2F\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705b9c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21659,"size_decoded":9688,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21655), with no line terminators","md5":"280edb839e8d48707fdae59b519fc8b5","sha1":"300eb26c39b16713cde7b1ebd826d6378eca8ddd","sha256":"416091bc09fcc3c863f823254ad26cc7ec857c52b7659e3ac1e72a3e17ccba42","sha512":"6c73b07faaa716a859b94e16c32cfe8e9fdaab728173763fc4e12e9dc77b8a464bd2d0c00186b5ad8efddaed0290add5de69a96f8e39ad34b4b7a0d988031c79","ssdeep":"384:3Pem25dig9a8owbUbYsaxwhuOkJuVOj2sOiNL/rijUL/7:3PQig9hxwEOkZZdTgULD","tlshash":"72a2c7f63296f0aa47de12a600ff5055f3b94da5280d0128f1b499cb3871658e3fbf66","first_seen":"2026-09-03T01:28:53.113503Z","last_seen":"2026-09-03T01:29:56.616241Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/SwapInterface-C4qJEAIo.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.119Z","timestamp":1788398873119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/SwapInterface-C4qJEAIo.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-1df32\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FZMnFL9xQy9qBnp93jTlRI4kCW0XW8EIeRlW4AO%2FQRwdNJcnLWgM533MeevlmjEvyEg6MJa4ec8TMWO46%2BpDv%2Bl2r63HlpFNBB8DplrnJEcqb2sDe%2FTeGGIuZI8p2%2B5TSmb\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97cfbd45685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122674,"size_decoded":40113,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64777)","md5":"5b5ef6ae486828e7f413b647bd0d7539","sha1":"0af03c3239cb5bb35bd5464536515fb1da105f7a","sha256":"34aad0d505dbf5c2c7a5dfc5b5d7efbd1f82595b4443a4382bd86fc08e8318c7","sha512":"c17c88261d42ebd88f02b685c8eacdacf3842229616f17c72e1fefc441bbe9b4ceb8201b79c286cd4d1cc1ca6f4d5b453b784dd1beb835ac01f472846580946f","ssdeep":"3072:GYlMi9+uq0WtNnfJZjhX1xonpFooePhJeq:GYlMi9+uq0WtNnzFouB","tlshash":"84c3e786f3813de8fb6b0594509bc11db12f8bc1c80b847cb6b978552689486efe6fc5","first_seen":"2026-09-03T01:28:53.11482Z","last_seen":"2026-09-03T01:29:56.602781Z","times_seen":2,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/solanaSplApproval-B49wU02J.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.121Z","timestamp":1788398873121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/solanaSplApproval-B49wU02J.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-4b6b\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fg2v4gr08CZvbe35siItB5S12f4gywnuFVF4afS%2F%2F9lhdHxcjSbQWq7CrQJajfA6L0K9%2Bhy41PLc1KnfHiXnAek75Z%2FOO0QdJTjd37aNgQWq0NswAIiu5IImUS9UrX9nSpOA\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97d0bd55685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19307,"size_decoded":8842,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18849)","md5":"a5502efe2cc876a36532c9018ae75805","sha1":"160225640df3d697b94847eb12fe25d33eac00f5","sha256":"cdb43a1a43777dbcb75dbd6eeb4cdbb30a8979d10def22851e11c9419c85be43","sha512":"c381ec583dd14a27258636a1c30f0408a16f729fa3151480da608e560349e86a7af98e56ac507749d1c1256b5eb388c2d923673be24b39f4a5846496f2559ca9","ssdeep":"384:O88Iu3BtazZNm+q6yeWKpYIMREVvr22FMrpRg5Grl/q:O81RzDm+91fpYIMyVDKpkGrxq","tlshash":"f682f7e0b397b17287c951765056a10dd02edaa5dc6c0556f2ae6c2333e94c4cefbf0a","first_seen":"2026-09-03T01:28:53.116788Z","last_seen":"2026-09-03T01:29:56.596375Z","times_seen":2,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/addressValidation-BfuTrPtj.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.085Z","timestamp":1788398871085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/addressValidation-BfuTrPtj.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-411\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMtnf7y2xYj%2FblZuGDJyi9PgIuFoOXoHjPAW653dxFB3eNRdsTrY%2FSH3s5wSK4y4OK526k8mT5ZuEJDIBOFApurteqUXLCMPT2MIOirX%2Fb378%2FfHrOYHkfLO7w6rl2SdwhJy\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9704b995685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1430,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1041), with no line terminators","md5":"198c8f5c8d0c99023e5ae89baf189fe7","sha1":"38d63e26abc6de03a748729dbe0d9137593ea814","sha256":"f5dd50489bca360de19244b4cbc954e69811ff49243459da091d4416a6e4e6bd","sha512":"7023ff0421096cb16a8a1201ab0c92728117e721f9edbb0a3aecdfb74b08e09df382247158a872838e950795133e205386dd131fb25cad5b427f746854fe79b1","ssdeep":"","tlshash":"8711ef9ff1afb0f8dbc8c45b21998546f6ac0559cd2c03e980320452981f069eba4b88","first_seen":"2026-09-03T01:28:53.118694Z","last_seen":"2026-09-03T01:29:56.60525Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/nonces?count=5","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.338Z","timestamp":1788398873338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 23:14:23 GMT","end":"Sun, 08 Nov 2026 00:14:19 GMT"},"fingerprint":{"sha1":"FF:4D:ED:ED:34:1C:CF:9C:62:A6:FE:FD:27:07:12:D8:CB:87:DA:8A","sha256":"50:4D:24:A5:35:CB:47:F8:01:C3:6C:40:4F:45:4E:57:D3:B9:E1:CF:B1:2D:2C:B7:43:CE:DD:AD:43:EC:90:E4"}}},"request":{"raw":"OPTIONS /api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/nonces?count=5 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-session-id,x-dyn-version\r\nReferer: https://switcher.finance/\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\nx-dyn-handled: rc-use1-999\r\ncache-control: no-store\r\npragma: no-cache\r\naccess-control-allow-origin: https://switcher.finance\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-session-id,x-dyn-version\r\naccess-control-max-age: 600\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=nQTk1MvVmsx0tD.CJZUfDw_Ddu8MrTNFl__ZCqzl8W8-1788398873.3399248-1.0.1.1-ntgigWQGf99PeJKsNbj4GXf1ZhNweLYGJU2XAfkAvsOl0Zid.AZIGtCRHNVrjykKk.mMuIN.TsD2i_gt2LQYDbJHY8Sc8MQH_0tKGVrLt2wehENgCKmfQrBsecLC8LtD; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: a350f97e5fd94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"nQTk1MvVmsx0tD.CJZUfDw_Ddu8MrTNFl__ZCqzl8W8-1788398873.3399248-1.0.1.1-ntgigWQGf99PeJKsNbj4GXf1ZhNweLYGJU2XAfkAvsOl0Zid.AZIGtCRHNVrjykKk.mMuIN.TsD2i_gt2LQYDbJHY8Sc8MQH_0tKGVrLt2wehENgCKmfQrBsecLC8LtD","quoted":false,"path":"/","domain":"app.dynamicauth.com","expires":"2026-09-03T01:57:53Z","raw_expires":"Thu, 03 Sep 2026 01:57:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=nQTk1MvVmsx0tD.CJZUfDw_Ddu8MrTNFl__ZCqzl8W8-1788398873.3399248-1.0.1.1-ntgigWQGf99PeJKsNbj4GXf1ZhNweLYGJU2XAfkAvsOl0Zid.AZIGtCRHNVrjykKk.mMuIN.TsD2i_gt2LQYDbJHY8Sc8MQH_0tKGVrLt2wehENgCKmfQrBsecLC8LtD; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1103,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T06:58:29.081316Z","times_seen":18268882,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/connect-solana-Cg7I_jRP.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.517Z","timestamp":1788398873517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/connect-solana-Cg7I_jRP.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-12b2a\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J7yzg3wBdv3o1izE65JYTIcoXMtjxjyL2CE7keiUcUnIXf7Mk3c0ziG18uegbWCnHvIjcIeUuEbjIPxXVUkIhu6iCLt6xGtMT5kNfPeZB1q0PtRDtNreNSJyT58YxsVau9vZ\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97f7be75685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76586,"size_decoded":26628,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59073)","md5":"45ec5330bf678405fea14af0c2c1db67","sha1":"4950edcc09cf51b583a60c24e5c34917ced78856","sha256":"6ed297995474e3afd30233bae0fbf3050eb59372c83cb35b722db4245c6dfe5c","sha512":"77b321c7fac2f8c679aff74884224c3996e67ad9a93061d442b917fd8d4a135c0657ec6613269ddb664ef913eedb523dd48f397e36637d647303d9b3fa402e3c","ssdeep":"1536:SHB6/5E/Gqb9/lcZ12emfEZ86fK2mxC6DX4m1uUNFtsyzY53J0vZJ1rnwjn+xtap:MME/GqbBl812emfEZ86fK2mxC6DX4m1Y","tlshash":"fe7329d9b343f1310bfb9665a8b64104f33d9498280e443cbaac09dbbab5445d2bbf75","first_seen":"2026-09-03T01:28:53.120249Z","last_seen":"2026-09-03T01:29:56.611277Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Mono\u0026family=Sora:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.072Z","timestamp":1788398871072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Fira+Mono\u0026family=Sora:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 01:27:51 GMT\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5889,"size_decoded":1385,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b0804c1bbdb77b6472f25b1cbee0063e","sha1":"ca7d653de4e80df5a3bc4200b3b43c4b2e0d35ef","sha256":"a485f2027c4b64168e0b40a488ae402f1de00c490673c094c61687e636042cc8","sha512":"2c338e9417aeae7241e353598a8c2f56fddfde78daa49cc54652c2f5dada2ec9c672623aed83b668620714dee30b860490c46de8de4e499aed6a4c5d3c83691e","ssdeep":"96:FOEa01OEapFZoOEaLOEaYCOEaPbOEa0Jc+uUOEaONlOEa1xJc+uoOEa1PNlOXa1i:a0KhsYVkQEt1BS1b1BB1+1Bo191Bv1G","tlshash":"06c11d81086ba444eb930cc263de7e27ee4e61526444d87d9ffe18d8fc9ec264361b0d","first_seen":"2026-09-03T01:28:53.121343Z","last_seen":"2026-09-03T01:29:56.61254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":37,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/favicon.svg","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:52.040Z","timestamp":1788398872040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: \"6a908dfe-615\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1IiS8RYFLzt6DNjiyQd%2BfpZn0VA0kSg89DhYwScL17qsqUhWIkwV0fWu2zpJ%2BFYgK5qlUJ0rAGm7vuqRFDu%2Bv4AQumdrBce56U1qoVlOQaXjSrIIy9RD6ozgsmXvzwJdLha\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9764baf5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1557,"size_decoded":1654,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7276f4f9da316129e8b74cdab8e75017","sha1":"db8868abf009fdcd79c4c218f2b3caca45e941cc","sha256":"92ca06380bd810d63f9bdbbab2b22441a56365899c20415eec2263b617b4e28c","sha512":"25aa1567dded57b63f047d8967f9475db3f9ca118c2e77ce9686229faba05aec2eadb056dd5da5a4f4361540caff90b8c162e61d6e24af94f48793d34524502f","ssdeep":"","tlshash":"bb3167d6616c71f1f14edfd0d8392451b69f18f67f25d5c412d824a4d62625ecc6ccc4","first_seen":"2026-09-03T01:28:53.122676Z","last_seen":"2026-09-03T01:29:56.600415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/index-kLr8pJB_.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.099Z","timestamp":1788398871099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/index-kLr8pJB_.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-5eeab\"\r\nexpires: Thu, 02 Sep 2027 20:11:28 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 18982\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yCTAy74NfW1xq4ZLrvD0yZZEosWvbr7u9YpqEd8qf0zGdxRaK5cz0wOlCXH67K8KY3YARYJFHeh%2FlkWtI5%2BKUUHnT7LzYjXeZgWwzoqa%2B9K2RRUsj1QDJPFv17cXw1ViB6Y8\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705ba45685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388779,"size_decoded":146450,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55478)","md5":"285853df36187f39c4ec59f437f02e94","sha1":"ef9b31a71408f677b56a6ec3a4884ef85150341d","sha256":"e222f751b19b232cfd175d64c5968f13c02e73db63ba51c687414d015e368331","sha512":"27f83d10476b9d5eb84352b8b9b46450b30d4198b0eacfe36000460bf3e29ddddd1f1e4a1674e8307ac58df0c25e80f8a6d15fd48fa5ebe4dba305295bba8c85","ssdeep":"6144:DceHqQXsWn2WPPllI2j8G2hrqyAOojVYdrBPhM93ON/REQMVkBeZuEojU0OZDAlR:gHUfqLhL","tlshash":"70846ce9329572616b9783f5402f150bb33a18766c0d4424b234fcae77b1489a5fbfe8","first_seen":"2026-09-03T01:28:53.123666Z","last_seen":"2026-09-03T01:29:56.587347Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/settings?sdkVersion=ClientSDK%2F1.8.2","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.036Z","timestamp":1788398873036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 23:14:23 GMT","end":"Sun, 08 Nov 2026 00:14:19 GMT"},"fingerprint":{"sha1":"FF:4D:ED:ED:34:1C:CF:9C:62:A6:FE:FD:27:07:12:D8:CB:87:DA:8A","sha256":"50:4D:24:A5:35:CB:47:F8:01:C3:6C:40:4F:45:4E:57:D3:B9:E1:CF:B1:2D:2C:B7:43:CE:DD:AD:43:EC:90:E4"}}},"request":{"raw":"OPTIONS /api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/settings?sdkVersion=ClientSDK%2F1.8.2 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-session-id,x-dyn-version\r\nReferer: https://switcher.finance/\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\nx-dyn-handled: rc-use1-999\r\naccess-control-allow-origin: https://switcher.finance\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-session-id,x-dyn-version\r\naccess-control-max-age: 600\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=MwdE3PYMbeWt6Gj25GmlXjom7qPltCdMGY3WTYC3nJ8-1788398873.0519354-1.0.1.1-xmZJ5P_Bi6wbxY_wbIFaKM8aJmOKnLbClpbGCkLGSrLwoFJ5.7bj8aryCOqCPDqpvzMCUowz.XiSB2unT3rWeF8XlZgkKeQrxq3pO4pScAHAaNhmZU_NFJ4EsEvsKzq8; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: a350f97c9e754e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"MwdE3PYMbeWt6Gj25GmlXjom7qPltCdMGY3WTYC3nJ8-1788398873.0519354-1.0.1.1-xmZJ5P_Bi6wbxY_wbIFaKM8aJmOKnLbClpbGCkLGSrLwoFJ5.7bj8aryCOqCPDqpvzMCUowz.XiSB2unT3rWeF8XlZgkKeQrxq3pO4pScAHAaNhmZU_NFJ4EsEvsKzq8","quoted":false,"path":"/","domain":"app.dynamicauth.com","expires":"2026-09-03T01:57:53Z","raw_expires":"Thu, 03 Sep 2026 01:57:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=MwdE3PYMbeWt6Gj25GmlXjom7qPltCdMGY3WTYC3nJ8-1788398873.0519354-1.0.1.1-xmZJ5P_Bi6wbxY_wbIFaKM8aJmOKnLbClpbGCkLGSrLwoFJ5.7bj8aryCOqCPDqpvzMCUowz.XiSB2unT3rWeF8XlZgkKeQrxq3pO4pScAHAaNhmZU_NFJ4EsEvsKzq8; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1060,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T06:58:29.081316Z","times_seen":18268882,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":3,"connect":11,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/nonces?count=5","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.337Z","timestamp":1788398873337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 23:14:23 GMT","end":"Sun, 08 Nov 2026 00:14:19 GMT"},"fingerprint":{"sha1":"FF:4D:ED:ED:34:1C:CF:9C:62:A6:FE:FD:27:07:12:D8:CB:87:DA:8A","sha256":"50:4D:24:A5:35:CB:47:F8:01:C3:6C:40:4F:45:4E:57:D3:B9:E1:CF:B1:2D:2C:B7:43:CE:DD:AD:43:EC:90:E4"}}},"request":{"raw":"GET /api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/nonces?count=5 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.1015\r\nx-dyn-request-id: -aKN3083NVHr4iZna7YQrUIoU2muffr6BcG4rGTRTdUgtatxL7\r\nx-dyn-session-id: upghX7hSd54LNmQ0hdoBhQbszTjlEuyT\r\nx-dyn-version: WalletKit/4.88.6\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\nx-dyn-handled: rc-use1-999\r\ncache-control: no-store\r\npragma: no-cache\r\naccess-control-allow-origin: https://switcher.finance\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"bb-2aGIIImIV6N7XzpnY++iGE3IMew\"\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=37b.uO.w6rRCmbq51lZJ379zlr7PqyIIbqWXSvwO1kg-1788398873.4933252-1.0.1.1-c_t.6E9zuw4U4caP.r3zbJNi3crYCf9gemKih.6TsCm0lvBObkhUjz6TNmpw3Vlc8fYSq3EHXF95UYMzEYpKoS5z5FHypxarr20t668FEcf5T80BrXZvT_we30hfOLgz; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a350f97f58f14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"37b.uO.w6rRCmbq51lZJ379zlr7PqyIIbqWXSvwO1kg-1788398873.4933252-1.0.1.1-c_t.6E9zuw4U4caP.r3zbJNi3crYCf9gemKih.6TsCm0lvBObkhUjz6TNmpw3Vlc8fYSq3EHXF95UYMzEYpKoS5z5FHypxarr20t668FEcf5T80BrXZvT_we30hfOLgz","quoted":false,"path":"/","domain":"app.dynamicauth.com","expires":"2026-09-03T01:57:53Z","raw_expires":"Thu, 03 Sep 2026 01:57:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=37b.uO.w6rRCmbq51lZJ379zlr7PqyIIbqWXSvwO1kg-1788398873.4933252-1.0.1.1-c_t.6E9zuw4U4caP.r3zbJNi3crYCf9gemKih.6TsCm0lvBObkhUjz6TNmpw3Vlc8fYSq3EHXF95UYMzEYpKoS5z5FHypxarr20t668FEcf5T80BrXZvT_we30hfOLgz; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0effdfb35cd987adb0d6a37de4af5985","sha1":"d9a18820898857a37b5f3a6763efa2184dc831ec","sha256":"04da13111622f279e2024115fa94b74029b2c3c2980a5e4cae1aeafd62dd88ac","sha512":"15e5bc8324adea29058d61bb1f39ce8d5616a67de2442f7169b8828ea64581f43bd924f4e8ff4630550c58d72fa2984409c2bc9852ac04744f166e3ee56199b0","ssdeep":"","tlshash":"aac0c068312366ccae2d3e750891f8030873be12d24b8503711357f7037c33104606cb","first_seen":"2026-09-03T01:28:53.124667Z","last_seen":"2026-09-03T01:28:53.124667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/config","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.449Z","timestamp":1788398873449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roX8uYVSMbd%2BIh7NVqqpQxjU9EpnY9a8qj9LeGcAzIfFfIv2y62oEXJfAs2Z1dJIzI6LowyIq88%2BxmCLhyqy7PuUSzj2BwOd%2BcjwIr%2FuWRRp2NE5oKJvMNuwxxhr%2B8jCxMOg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97f0bde5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":496,"size_decoded":1175,"mime_type":"application/json","magic":"JSON text data","md5":"f076261e4119c744701ddb027978a607","sha1":"c5d1dee593e9afb8470ef6f2076de0d908991c92","sha256":"63aafdb5d686ef3167d31fc355774dd4bba5f914cc973ec6d30c25b2ba013f24","sha512":"57f9aa68b7fec4e41faf617613fb94bebe5af1c408f476419a73013fa62b544b11ae4aac42c5a6d74e8b40cf0f8ac6d62d8a1b64d6d8062e21af9f9767b78cde","ssdeep":"","tlshash":"c3f0b45f25ea6df3d175d1ca50c9144a2e7fa27861608c0d1658cbca23c6359b493d03","first_seen":"2026-09-03T01:28:53.125642Z","last_seen":"2026-09-03T01:29:56.597241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/motion-lWrR49Xn.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.083Z","timestamp":1788398871083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/motion-lWrR49Xn.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-40e0\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JiiDrsvGrrIjdixZkhS4AqnuxDKZlYWAgMLaR8M7KoOdc%2Fgg8p3ZFtLAFyTZortWcc9Z2JNK0WQ7K9uzu7qYgMjtgOiIjUblY8A7sBXMh3EIDQwLk2Uh07oArr3OzvFztKK\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9704b985685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16608,"size_decoded":7445,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16526), with no line terminators","md5":"47e0d1414cf44c8c4f4771d8369d4605","sha1":"283d93ed6f9a08efd2f9b984f1064de3496def7f","sha256":"395ebc1454d005ee6c0dd419dbdbfd83322b0400663ee2e73bc0aec6284e4da5","sha512":"27df55094efd3daa3eb95bfbaf659353e625171171222c9e6a03810d978d8dbb5b317d78cd7eae2625e51c655e0fd4e5fedc3c4efd11eb471f099d950e16f33f","ssdeep":"384:woleSql52nlut8bj8rRPa2DyEJut98RIRn7ACoqONq5:wolklKuaQ82DyEY8RIN8CoqYq5","tlshash":"2472e7eeb34bb23143ef506df0878124e63a49a0d42d0134b19ac49e37ad98d9b67fd5","first_seen":"2026-09-03T01:28:53.126671Z","last_seen":"2026-09-03T01:29:56.604658Z","times_seen":2,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-pdf-pk4LuyeY.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.094Z","timestamp":1788398871094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/vendor-pdf-pk4LuyeY.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-66679\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mdJNtc9aKNp4h4JmLblZbdjYHj894Nv0zmfCRjncOPO4a8CiFWL56GTAk%2B%2FTeOecBWMyhJGcjRTbt1by6Hp5Wd1UH23aqa3UjdsYzR0%2FBZos%2FU3KNBwBL6hLXkNXGtlFJYK\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705ba05685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419449,"size_decoded":148149,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"3591b5d707a2ec6fc46f9578034e3889","sha1":"9dc8ac449dec405dbeb53ee1632f1415fa2e81cd","sha256":"c6492e92125e4a4f2902f031bc16c507cb37590a3efa4d4a2febb1c1dac5a9d4","sha512":"1a007ede7f6454304ba9fa45ce786bbe1dfe02f7b786bbd67d58fe37e42c6be6f427ce8a7cf634cb64b6c1535f4d60bb9fab2986907aa2c95ddfd1acb34ae76e","ssdeep":"6144:gI2Kv19T4mvkBuclD5hQZzRHnAb/nNJr3vs3V1R/x:8KvbLkAIFhQRVAb/nNJr38V1hx","tlshash":"0b9429f333557436a3d982976cb80102e3266895680e482cb56cacdf299bcc572fdf79","first_seen":"2026-09-03T01:28:53.128913Z","last_seen":"2026-09-03T01:29:56.598861Z","times_seen":2,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/SectionHeading-bcKsb0o0.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.127Z","timestamp":1788398873127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/SectionHeading-bcKsb0o0.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zzXNkNyMCVf0Ok47I0Wm9IBChPbiMBcP1fOJZFr4IC1ypTPgWj%2F0CPG9pc4tR0InJuzmOkZ%2BWNHBAnjz96QWvNQTxq43rhX5rxyHds0khCQDSGSaywEvpnWh1nb9JP3sw7c\"}]}\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a908dfe-215\"\r\ncf-ray: a350f97d0bda5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533,"size_decoded":1091,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (533), with no line terminators","md5":"a592617fc74d247b75cb188a3da665ad","sha1":"a64d563995ab4e2f7b74b0d39fb41f7dc95d598b","sha256":"a0d2fdbc757138c42f697aca2fce1f77328275df7f93a1276f0071ddf9c45da5","sha512":"717ea5feb6854fe3be02c7e61af9c97403bbe358fbcf668d3367632cb82f5bb6e70d0a4208776d1021b3146468023efd9f827b3b2bf263855ab385905071aed8","ssdeep":"","tlshash":"5ef0200a50417de4b1070ca061ac821af132af4ccb6b83a576f4a92202590c0bb26fc4","first_seen":"2026-09-03T01:28:53.130452Z","last_seen":"2026-09-03T01:29:56.62607Z","times_seen":2,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/connect-evm-BZGEuSWx.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.515Z","timestamp":1788398873515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/connect-evm-BZGEuSWx.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-25491\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLO6HQRCiFvrvBAJsSLiYMFLtmO2z1zsWEOO5EW6ChQq%2BQaCJi6TpHUVGW95dzcP86N%2BrP6GcvBVUnxsNr6g44QdtGWbOiWScmpsNxyr%2Brw7Gkpl40M6kqwaH7haK8C0Tvf5\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97f7be55685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152721,"size_decoded":57808,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42291)","md5":"d0ca39500490c5d9c9e04cdf595341eb","sha1":"3c72a9f1119517cc57f9d9e0ca21a625440f13c5","sha256":"770373f98e31a67fbd3b41d7457c0cddead56b15ed7ce416810cf57b2d224a36","sha512":"cc38a4793cc18a2ccc1acdae58e725796857dd18088194d4712a83e058d5e0390de2b80d8412efa4ca494886f50dd85a881e85f0d39cdb12012dcfe789f00ba0","ssdeep":"3072:HP5a9Xq+vZcAScrJaTEwMzLcZNeEcOk91i9OsxdNlQ9a08d6F0qP6X3Popq9dkmp:HBCXq2Z23EwMncZNeEcOk91i9OsxdNlL","tlshash":"ace3d4c872d3f06193ab6675407f440af3396c94280e4428f668e5debeb9549c2b7f39","first_seen":"2026-09-03T01:28:53.131532Z","last_seen":"2026-09-03T01:29:56.581385Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/dynamic-labs-CNND8iW1.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.076Z","timestamp":1788398871076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/dynamic-labs-CNND8iW1.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-5fd3db\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwNQpQ6n1v5KkCxdBg3xll%2BhRXMcYXL2%2F4s0hVrULFaVQQ%2Bd55JoeTmdaTU9qEdW%2BDc4f6rxzmUWDLxHSj9REWuRSRh5WROGNibtCUooO0xpALcug5KZapoIStFPTr8NjX%2Bx\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9703b935685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6280155,"size_decoded":2005848,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23588)","md5":"c4a92c65f9a9ff8c36ebc1c3e8a7801a","sha1":"ebdce9dd7706a19637102bc0467ddce7239f8535","sha256":"e0518db57d914895f67524b9a4a255c7ab255732862d463453ebba7ae2cf8447","sha512":"30f94a93d8aed6f907d8fb395a7476dcb58b90c5465024e4df119aa8bbcc21a4b9753e554a59edeadfeca385cfef8b2bb83ac3b76e3279a5976be30e3d0f68f2","ssdeep":"12288:9Y0mQP+gfCZCsmmoEqsiViSmqIwSXtS1TwMe+MPUJfIbDa1DFez9:RmO+gfE4EyCOIbDa1xez9","tlshash":"5d255dc2731c71506396a235e49f1129e239da56fc1d0035b9a4d88b2bb2d9cd7faf32","first_seen":"2026-09-03T01:28:53.132473Z","last_seen":"2026-09-03T01:29:56.585644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-pdf-rptWOpCb.css","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.097Z","timestamp":1788398871097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/vendor-pdf-rptWOpCb.css HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-238a\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyTEKrMvonbMQOZUm743ISYXB8%2BFRgRfy77gwStQFXYGtiPBjBgK1T0oKFkbKg%2FUsKY1y6DFkf4dcrt4McWkF0bO4CyZ2VyFBHx4yXUH7ZhiGFnuTsXTQWHBLl08pXVhR7rm\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705ba35685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9098,"size_decoded":3020,"mime_type":"text/css","magic":"Algol 68 source, ASCII text, with very long lines (9097)","md5":"01809a93ccca075a07ea8bea05e8f288","sha1":"f382ad497d0142dfcf81b2a4da112bcb95ae2601","sha256":"40e1b603234c19020246a3e60e88370fbe581f1131fda97e71ad381467950b8e","sha512":"5ab648afb684dbe29d2d09dbb3f78ff29decf235365456e39d0c15472d7c23ce37006d8bdb2bf25bbfa7b9890693bd6a9da3267e33ef3c6c304dcbfb9d1e8031","ssdeep":"192:Ny8kjkhFZtj0muvHq3O9inNppOL+6X9Ltbq70IZgjcvrPc:Ny8kgHZtwVvHq3OUNppc+sx00IZtc","tlshash":"3c122ffc524a5839cd9f8e6374b4c28ce2316aed99121f40ec5da16a44891b4b7efe07","first_seen":"2026-05-23T13:34:01.127297Z","last_seen":"2026-09-03T01:29:56.599764Z","times_seen":7,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.303Z","timestamp":1788398873303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 23:14:23 GMT","end":"Sun, 08 Nov 2026 00:14:19 GMT"},"fingerprint":{"sha1":"FF:4D:ED:ED:34:1C:CF:9C:62:A6:FE:FD:27:07:12:D8:CB:87:DA:8A","sha256":"50:4D:24:A5:35:CB:47:F8:01:C3:6C:40:4F:45:4E:57:D3:B9:E1:CF:B1:2D:2C:B7:43:CE:DD:AD:43:EC:90:E4"}}},"request":{"raw":"POST /api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nx-dyn-request-id: KgBlNMAsEuJwWzd2HI0bDEBpVV5wmctMfkIqFdH94F0dMQw-0X\r\nx-dyn-version: WalletKit/4.88.6\r\nx-dyn-api-version: API/0.0.1015\r\nx-dyn-is-global-wallet-popup: false\r\nContent-Length: 8051\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8051,"data":"{\"dynamicContextProps\":{\"settings\":{\"environmentId\":\"6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610\",\"initialAuthenticationMode\":\"connect-only\",\"enableVisitTrackingOnConnectOnly\":true,\"theme\":{\"border\":\"rounded\",\"brandStyle\":\"subtle\",\"customColor\":\"#6cc5f9\",\"template\":\"default\",\"view\":\"extended\",\"theme\":{\"name\":\"dark\",\"colors\":{\"background\":\"#0d0f13\",\"primary\":\"#101216\",\"secondary\":\"#181b21\",\"accent_1\":\"#181b21\",\"accent_2\":\"#1f242c\",\"accent_3\":\"#2f3542\",\"footer\":\"#101216\",\"ternary\":\"#6cc5f9\",\"textPrimary\":\"#f1f3f7\",\"textSecondary\":\"#8b95a8\",\"border\":\"1px solid #262b35\",\"error_1\":\"rgba(255, 106, 106, 0.2)\",\"error_2\":\"#ff6a6a\"}}},\"cssOverrides\":\"\\n\\n#dynamic-widget,\\n#dynamic-modal,\\n.dynamic-shadow-dom,\\n.dynamic-shadow-dom-content,\\n.dynamic-widget-modal,\\n.dynamic-widget-card,\\n.dynamic-modal-shell\\n {\\n\\t--dynamic-base-1: #0d0f13;\\n\\t--dynamic-base-2: #101216;\\n\\t--dynamic-base-3: #181b21;\\n\\t--dynamic-base-4: #1f242c;\\n\\t--dynamic-base-white: #f1f3f7;\\n\\t--dynamic-background-color: #0d0f13;\\n\\t--dynamic-background-disabled-color: #101216;\\n\\t--dynamic-overlay: rgba(6, 8, 12, 0.72);\\n\\t--dynamic-hover: #1f242c;\\n\\t--dynamic-border-color: #262b35;\\n\\t--dynamic-border-radius: 20px;\\n\\t--dynamic-border-1: 1px solid #262b35;\\n\\t--dynamic-border-2: 1px solid #2f3542;\\n\\t--dynamic-border: 1px solid #262b35;\\n\\t--dynamic-text-primary: #f1f3f7;\\n\\t--dynamic-text-primary-color: #f1f3f7;\\n\\t--dynamic-text-secondary: #8b95a8;\\n\\t--dynamic-text-secondary-color: #8b95a8;\\n\\t--dynamic-text-tertiary: #5b6478;\\n\\t--dynamic-text-link: #6cc5f9;\\n\\t--dynamic-text-white: #f1f3f7;\\n\\t--dynamic-brand-primary-color: #6cc5f9;\\n\\t--dynamic-brand-primary-color-10: rgba(108, 197, 249, 0.1);\\n\\t--dynamic-brand-secondary-color: #4a8bb0;\\n\\t--dynamic-brand: #6cc5f9;\\n\\t--dynamic-brand-dark: #4a8bb0;\\n\\t--dynamic-badge-background: #181b21;\\n\\t--dynamic-badge-color: #8b95a8;\\n\\t--dynamic-badge-dot-background: #6cc5f9;\\n\\t--dynamic-badge-primary-background: rgba(108, 197, 249, 0.14);\\n\\t--dynamic-badge-primary-color: #6cc5f9;\\n\\t--dynamic-button-primary-background: #6cc5f9;\\n\\t--dynamic-button-primary-border: none;\\n\\t--dynamic-button-secondary-background: #181b21;\\n\\t--dynamic-button-secondary-border: 1px solid #262b35;\\n\\t--dynamic-connect-button-background: #181b21;\\n\\t--dynamic-connect-button-background-hover: #1f242c;\\n\\t--dynamic-connect-button-border: 1px solid #262b35;\\n\\t--dynamic-connect-button-border-hover: 1px solid #6cc5f9;\\n\\t--dynamic-connect-button-color: #f1f3f7;\\n\\t--dynamic-connect-button-color-hover: #f1f3f7;\\n\\t--dynamic-wallet-list-tile-background: #181b21;\\n\\t--dynamic-wallet-list-tile-background-hover: #1f242c;\\n\\t--dynamic-wallet-list-tile-border: none;\\n\\t--dynamic-wallet-list-tile-border-hover: none;\\n\\t--dynamic-wallet-list-tile-shadow: none;\\n\\t--dynamic-wallet-list-tile-shadow-hover: none;\\n\\t--dynamic-search-bar-background: #101216;\\n\\t--dynamic-search-bar-background-hover: #181b21;\\n\\t--dynamic-search-bar-background-focus: #181b21;\\n\\t--dynamic-search-bar-border: 1px solid #262b35;\\n\\t--dynamic-search-bar-border-hover: 1px solid #2f3542;\\n\\t--dynamic-search-bar-border-focus: 1px solid #4a8bb0;\\n\\t--dynamic-modal-backdrop-background: rgba(6, 8, 12, 0.72);\\n\\t--dynamic-modal-backdrop-filter: blur(10px);\\n\\t--dynamic-header-background: #0d0f13;\\n\\t--dynamic-header-border-bottom: none;\\n\\t--dynamic-footer-background: #101216;\\n\\t--dynamic-footer-border-top: 1px solid #262b35;\\n\\t--dynamic-footer-icon-color: #6cc5f9;\\n\\t--dynamic-font-family-primary: 'Sora', system-ui, sans-serif;\\n\\t--dynamic-success-1: rgba(108, 197, 249, 0.16);\\n\\t--dynamic-success-2: #6cc5f9;\\n\\t--dynamic-error-1: rgba(255, 106, 106, 0.2);\\n\\t--dynamic-error-2: #ff6a6a;\\n\\tcolor-scheme: dark;\\n}\\n\\n[data-testid=\\\"sandbox-indicator\\\"] {\\n\\tdisplay: none !important;\\n}\\n\\n.modal-header--border,\\n.layout-header .modal-header {\\n\\tborder-bottom: none !important;\\n}\\n\\n.accordion-item.accordion-item--full-height {\\n\\theight: auto !important;\\n}\\n\\n.accordion-item:not([style*=\\\"max-height: 0\\\"]) {\\n\\tmax-height: none !important;\\n\\toverflow: visible !important;\\n}\\n\\n.dynamic-shadow-dom .modal,\\n.dynamic-shadow-dom .modal__items,\\n.dynamic-shadow-dom .modal-card,\\n.dynamic-shadow-dom .modal-card--radius-default,\\n.dynamic-shadow-dom .modal-card--radius-small,\\n.dynamic-shadow-dom [data-testid=\\\"dynamic-auth-modal\\\"] {\\n\\tborder-radius: 20px !important;\\n\\toverflow: hidden !important;\\n}\\n\\n.dynamic-shadow-dom .modal-header {\\n\\tborder-top-left-radius: 20px !important;\\n\\tborder-top-right-radius: 20px !important;\\n}\\n\\n.dynamic-shadow-dom .default-footer__footer,\\n.dynamic-shadow-dom [data-testid=\\\"dynamic-footer\\\"] {\\n\\tborder-bottom-left-radius: 20px !important;\\n\\tborder-bottom-right-radius: 20px !important;\\n}\\n\\n.login-view__scroll,\\n[data-testid=\\\"login-view-scroll\\\"] {\\n\\tmax-height: none !important;\\n\\theight: auto !important;\\n\\toverflow: visible !important;\\n\\t-ms-overflow-style: none !important;\\n\\tscrollbar-width: none !important;\\n}\\n\\n.login-view__scroll::-webkit-scrollbar {\\n\\tdisplay: none !important;\\n}\\n\\n.login-view__container,\\n.login-with-email-wallet-list__container,\\n.vertical-accordion__container {\\n\\toverflow: visible !important;\\n}\\n\\n.login-view__scroll__section--emailAndPhone {\\n\\tpadding-top: 1rem;\\n}\\n\\n[data-testid=\\\"submit_button\\\"],\\n.login-with-email-form__button.button--brand-primary {\\n\\tborder: none !important;\\n\\tbox-shadow: none !important;\\n\\toutline: none !important;\\n}\\n\\n.wallet-list-item__tile.list-tile {\\n\\tborder: none !important;\\n\\tbox-shadow: none !important;\\n}\\n\\n.wallet-list-item__tile.list-tile:hover {\\n\\tborder: none !important;\\n\\tbox-shadow: none !important;\\n}\\n\\n.dynamic-shadow-dom .wallet-group-view-layout__title {\\n\\tdisplay: none !important;\\n}\\n\\n.dynamic-shadow-dom .wallet-group-view-layout__icon {\\n\\tmargin-bottom: 0.5rem !important;\\n}\\n\\n@media (min-width: 641px) {\\n\\t.dynamic-shadow-dom .modal-component__backdrop {\\n\\t\\tbackground: rgba(6, 8, 12, 0.94) !important;\\n\\t\\tbackdrop-filter: blur(16px) !important;\\n\\t}\\n}\\n\\n.list-item-button.list-tile {\\n\\tborder: 1px solid #262b35 !important;\\n\\tbox-shadow: none !important;\\n}\\n\\n.list-item-button.list-tile:hover {\\n\\tborder: 1px solid #2f3542 !important;\\n\\tbox-shadow: none !important;\\n}\\n\\n@media (max-width: 640px), (pointer: coarse) {\\n\\t.dynamic-shadow-dom {\\n\\t\\t--dynamic-modal-padding: 1.25rem;\\n\\t\\t--dynamic-header-padding: 1.25rem 1.25rem 1rem;\\n\\t\\t--dynamic-initial-view-content-padding: 0 1.25rem 1.5rem;\\n\\t\\t--dynamic-layout-content-padding: 0 1.25rem 1.5rem;\\n\\t\\t--dynamic-wallet-list-tile-padding: 0.875rem;\\n\\t\\t--dynamic-wallet-list-tile-gap: 0.5rem;\\n\\t\\t--dynamic-text-size-body-normal: 1rem;\\n\\t\\t--dynamic-text-size-title: 1.25rem;\\n\\t\\t--dynamic-search-padding: 0 1.25rem 0.75rem;\\n\\t}\\n\\n\\t.dynamic-shadow-dom .modal-component__container {\\n\\t\\talign-items: flex-end !important;\\n\\t}\\n\\n\\t.dynamic-shadow-dom .modal,\\n\\t.dynamic-shadow-dom .modal__items,\\n\\t.dynamic-shadow-dom .modal-card,\\n\\t.dynamic-shadow-dom [data-testid=\\\"dynamic-auth-modal\\\"] {\\n\\t\\twidth: 100% !important;\\n\\t\\tmax-width: 100% !important;\\n\\t\\tmin-height: 72dvh !important;\\n\\t\\tborder-radius: 20px 20px 0 0 !important;\\n\\t}\\n\\n\\t.dynamic-shadow-dom .modal-header {\\n\\t\\tborder-top-left-radius: 20px !important;\\n\\t\\tborder-top-right-radius: 20px !important;\\n\\t}\\n\\n\\t.dynamic-shadow-dom .default-footer__footer,\\n\\t.dynamic-shadow-dom [data-testid=\\\"dynamic-footer\\\"] {\\n\\t\\tborder-bottom-left-radius: 0 !important;\\n\\t\\tborder-bottom-right-radius: 0 !important;\\n\\t}\\n\\n\\t.dynamic-shadow-dom .login-view__container {\\n\\t\\tpadding: 1rem 1.25rem !important;\\n\\t}\\n\\n\\t.dynamic-shadow-dom .list-tile {\\n\\t\\tmin-height: 3.25rem;\\n\\t}\\n}\\n\",\"overrides\":{\"multiWallet\":true},\"walletConnectorExtensions\":[{\"name\":\"switcher-phantom-btc\"},{\"name\":\"switcher-tronlink-detect\"}],\"walletConnectors\":[\"kdn\",\"hWn\",\"\",\"yvr\",\"_8t\"],\"customPrivacyPolicy\":false,\"customTermsOfServices\":false,\"policiesConsentInnerComponent\":false}},\"frameworkSettings\":{\"react\":{\"version\":\"19.2.6\"}}}"}},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\nx-dyn-handled: rc-use1-999\r\ncache-control: no-store\r\npragma: no-cache\r\naccess-control-allow-origin: https://switcher.finance\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=FOHoLMt.tZ9bhhgUvV9INjcWUZw2iqfzTNYvO3ZpYsM-1788398873.4387715-1.0.1.1-6WNnVDi2VIGCoPYLE9JBYh4JbYadD5pUi11w0TzEf66q0MISz8lR8RqHqyRdl3UGMD9UcpiPXXdh7fRime76RGxe_hbV97PLudTkky0gowZ4jhQadtYkbjDL6xOssO9g; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT\r\nx-frame-options: DENY\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a350f97ef8a14e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"FOHoLMt.tZ9bhhgUvV9INjcWUZw2iqfzTNYvO3ZpYsM-1788398873.4387715-1.0.1.1-6WNnVDi2VIGCoPYLE9JBYh4JbYadD5pUi11w0TzEf66q0MISz8lR8RqHqyRdl3UGMD9UcpiPXXdh7fRime76RGxe_hbV97PLudTkky0gowZ4jhQadtYkbjDL6xOssO9g","quoted":false,"path":"/","domain":"app.dynamicauth.com","expires":"2026-09-03T01:57:53Z","raw_expires":"Thu, 03 Sep 2026 01:57:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=FOHoLMt.tZ9bhhgUvV9INjcWUZw2iqfzTNYvO3ZpYsM-1788398873.4387715-1.0.1.1-6WNnVDi2VIGCoPYLE9JBYh4JbYadD5pUi11w0TzEf66q0MISz8lR8RqHqyRdl3UGMD9UcpiPXXdh7fRime76RGxe_hbV97PLudTkky0gowZ4jhQadtYkbjDL6xOssO9g; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":9643,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T06:58:29.081316Z","times_seen":18268882,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/tokens/popular","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.846Z","timestamp":1788398873846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/tokens/popular HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:54 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjlxJbaaoFv4foVPJNbF%2BitA%2B2tViAq9fu44VoYwFknt%2FVMA7k6WXiaPGZfkhz9ed3z3ul9zrgH%2B19v12Coa%2BFL3q3pPH5oXLN6R4cu1Zf8ICugldfdTwsE8WiCsnTR0%2F2%2BI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9818c1b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2469,"size_decoded":1784,"mime_type":"application/json","magic":"JSON text data","md5":"74542e9ffd8feb96f3ab9d344516ee38","sha1":"f4ffa250bec8d2fca37704de5701663c06944bce","sha256":"aab35da8b0015cb94e6a97c256a20a595a2cb59b2ec8ee9150174789263a2ebe","sha512":"0fc59af2251eb74980102426f54c959939c7d7e4355aceeca71c61e42073ee2c9c9c02fd71c92b67427ee33c5f1a8891cf40127a62a343147d9e2a07377268fc","ssdeep":"","tlshash":"095102db1248215ecb2671ec50e732dc7261f25199d488bec165cc5c93daf238957f71","first_seen":"2026-09-03T01:28:53.13467Z","last_seen":"2026-09-03T01:29:56.584548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/tokens?chainId=1\u0026limit=200","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.850Z","timestamp":1788398873850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/tokens?chainId=1\u0026limit=200 HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVjVub%2Fkj6jagJh8xunP8Q8ccPX6D6GfN4k2KuzS3Qp5ZOenjXoUA%2Fcx7%2Fi%2FdgiUg2WPSYhy%2FNZqVnVaaZfpntK7cQMcYNaoXze5uMtgQr2gMSP0FEVhIDwZHE2COHg1IM20\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9819c1d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55291,"size_decoded":14455,"mime_type":"application/json","magic":"JSON text data","md5":"91654dc427e327ee3d9908d23804bb1c","sha1":"9671a834e0f624c47e23043da6ed799c1def611b","sha256":"bcb1710e1c52c4f9f59ca3be81ff10a56a6c2ee5f5929025f5bb8ad4830b875a","sha512":"c8c63cf13183edd46b70cdc4d1e71ca44249d3a1ca303b81564eafd7caa766942955a32245f8739e0b2b46f9f662d7093bc2802294032eebb436046fd6c2a2b0","ssdeep":"1536:JmF7zXSBrfeiQd5UjHO6gXKEDXZJWdW4FLr17q6EWftqqldYjFx0Mc8ZZRNFD6OF:JSwZylTB/YtEwUZX","tlshash":"ec4335abdeac097a8f490e76e097f1c5b7d551a026bd0462f04e8b08c3a1f52d363b56","first_seen":"2026-09-03T01:28:53.135773Z","last_seen":"2026-09-03T01:28:53.135773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/rolldown-runtime-zSbnoVup.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.075Z","timestamp":1788398871075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/rolldown-runtime-zSbnoVup.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-4f9\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVK2mTuQ8YVC%2F7imjvY6qjUo8kxwYFIrsEQacUYJW6R6PqqLfgAUh8dAhQz9YNOYLmuq%2FLutHeviV27WfPGAsxH2t5gkTJAu60iFLuE9lclBL7AShVHGOoVkUj4I5%2B48UzMx\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9703b925685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1273,"size_decoded":1479,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1273), with no line terminators","md5":"d9049da640bd064c86bc9864dbf50d1d","sha1":"edbdb8249a3279bcccaf12c2ca0eeb35d41c914d","sha256":"0c0bf430afd3b71beff576c47908b01139baba43f826f93f587baaccb6e3a378","sha512":"e4404f0fa54f5d9f250988c4e8cdc95745b7eae2a14143d4b9492bf1c2925b6ab81f924fab4ec698d7cd945b81a7abff52c5d143def38e658b0d8f91ffefff09","ssdeep":"","tlshash":"c82195ef1ac0f2f2625653c1e62d5085e365f43d9a7c3090f3684af165c10c511c5e76","first_seen":"2026-04-25T00:40:33.613618Z","last_seen":"2026-09-03T23:19:51.409247Z","times_seen":384,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-motion-CiBz2xZv.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.082Z","timestamp":1788398871082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/vendor-motion-CiBz2xZv.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-17116\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdYvM3tSg5Lrx%2BCR%2B4wsPfqTBtibCitg2NpatSK5CdCOGnoq1la1eF3QRBWR5Kp2flS84fPp2uEHVVI5a5dA9aYvsqandi9lIVvMVkI8wr01Nqdd7kizoqEACt6Dzix6mVWW\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9704b975685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94486,"size_decoded":36988,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d8006b325d12401d364f7be2b39fa2c2","sha1":"f949af75475ddbd0b948d6c64bcc6e30552a3ddd","sha256":"a13331fed8e47ad98c543eade61c00274343bdeb4d871c130dd289804015ec65","sha512":"2fb7b942cae0d7f93a419954f2e1b6429ad7a8ce40e6a08c1145e6fa6a380224a2eaa982148802ad1e1491dffb01c7c326383f9feedb916181034e007b9900b8","ssdeep":"768:9AQsSVS6i7FUNrxZYT/YggDX9QkiwgzamWnNWIcZrgYN6zlxPWna9NsN9DV40Rj/:DVlv4lgDp7gzd0oI0GO9e2jyi","tlshash":"c293f7d63391b022c3df9266c0af4a45b33759d8180d403cb639a9db39619096bfbf79","first_seen":"2026-09-03T01:28:53.138621Z","last_seen":"2026-09-03T01:29:56.615606Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-three-fUcjcq51.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.088Z","timestamp":1788398871088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/vendor-three-fUcjcq51.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-d78db\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZAY2KXH%2FnxNOS22X7yxhtIMQk8gfRBHETX8z2R9Fae52EqulWXYDYJjkTzJ9VVGCymyVGkY4nshRyViA7bBg2z3yeydjufyJ2Z3sNzNUrMypEizOkKs%2BCm%2B9N9ax5LutDWoG\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9704b9b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":882907,"size_decoded":281595,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"282dec3e99b4a6618fe02fe02a318bfb","sha1":"f018c0827713242d2368bd9eae8c71a1216e9ba0","sha256":"ef1a065abfea5378b8808cee14560af77044d64a80230f543848db94737d7356","sha512":"d50246f3e6b56da0d94c396de39a32724221ad9e55a003907542d89e9746c51a7ae12c80042928fbabfc880cac4db2b6a9de19b59f2b04279a62f44af91a3bf3","ssdeep":"24576:L9BINbhJ56mscAmhOuEMwbMaClWaZ+HmC:HINbhJ5hscAmhOuEMwbMaClWG+GC","tlshash":"f3156be5737570578b5b90ab547a0042b339b8972c0d852c752ce8eb74a0849b2fffb9","first_seen":"2026-09-03T01:28:53.140458Z","last_seen":"2026-09-03T01:29:56.610661Z","times_seen":2,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/ConnectWalletSlideContent-B_B5c7lC.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.122Z","timestamp":1788398873122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/ConnectWalletSlideContent-B_B5c7lC.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-6dd\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITp3%2FKJxvRK%2FREVORshoxtR%2Fq5KNUuxz5BkHRUFrueHG8AemRftzKSlINHXr3WkltHjduscrDNw%2Bb5I%2BdF%2BH7t2acVlzKo5uT%2BzsxzX8YRVkrCJkB8RiQt4EVlLgwn5Yzrmm\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97d0bd65685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1757,"size_decoded":1480,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1757), with no line terminators","md5":"0990aaae0846fd26ede1d14896cad6af","sha1":"4f24327862aa52e7ef9341f0efa990b0ea45a937","sha256":"8f0e5fbe2dd0f375b9f2a270172e6dfa509da4f9041b4f36a617c46ba7bd27cb","sha512":"6972b775d23aeeda88a8f6d24b28b5cfbef7396c4f71470d24228d8f563ac70e8f76e11c523f992452cf81a4ef17cb1dfa7ddccfeb03e3940266c9df1e9595e3","ssdeep":"","tlshash":"3731ac1ee111e6fcb4775984606dd08e328ef028db1e5870a2ec763629450fc7d5abc9","first_seen":"2026-09-03T01:28:53.141619Z","last_seen":"2026-09-03T01:29:56.611867Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.308Z","timestamp":1788398873308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25284\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 09:47:53 GMT\r\nexpires: Fri, 27 Aug 2027 09:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574800\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25284,"size_decoded":26097,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25284, version 1.0","md5":"fc575ebf6f7c3646d13d9386cf8a86e0","sha1":"779e9507b31992161d36df9f8a78ee73a6e64225","sha256":"811e11966d29f3a01fcb19b087b61ac067d380665a55aebb7fcdf2cda95e4a93","sha512":"bf1f6890960e5fe79619d0a7757b95b9e422e3aa5634b1fcfe7b59f018234ec9aff01ae70d9b3593e1e5ddde78e716139c443e5ab0741a61c5d6b1637397412c","ssdeep":"384:dZgkQy8vw6D97NySvnt+kywHJ0WQ5k77oyquIw8CTTu36ioguDDYdiW3I7Oa4Leq:dmJ0G95ySAIHJvd2uIw86zioFA2OC5cL","tlshash":"63b2f14db61d308cfa05cabf0ecb8aba2031dc44bd5b39c4f217928739f6a6599c4564","first_seen":"2025-09-10T18:00:33.205576Z","last_seen":"2026-09-04T05:08:55.995425Z","times_seen":3192,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/metamask-onboarding.es-C6cRrz1g.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.516Z","timestamp":1788398873516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/metamask-onboarding.es-C6cRrz1g.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-17823\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDO6ySle1vgbNpqjqVB6yFo5AzmS3%2Ft1RkDYMH0CN5L0phSRUwUjlHANent9TlkKcuzJZfP0DIlddGsP8c6twNZZS5vtK6lUHzFZBcIONpbtqL3%2FNW4n%2BKEvcrTqweqdcsSb\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97f7be65685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96291,"size_decoded":36490,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e6b280cc68c71b8ed66ac14e78bb6ffe","sha1":"c1a25e5c2671c0a6b1ae3e7170cfe1d2d66e6d43","sha256":"30e8099e5426c37f4a33f3d85853662bfdf9d0b866089c848431e9c2d61d61be","sha512":"a01c9756e02e791cbce6059bbd683e1a1d769057826fc221aa5d26884473d08c87c0d3e4683a332492c27221f060b4e75953628ab5bdbfd2c498191fe6f2ec77","ssdeep":"1536:RDJ0Jb2R3ZJZGI8XFPvXmWYfdT5njJa4ILQ62kz+91hGTLkIZ3qLp96Qna6W:hJ4EJvGIIFPv5YFTBw4IziwLFZ3qLP6B","tlshash":"18934be233e1b02603e658e4519b1695f23a15651c0d0578f578ccfb38a099af6bbfbc","first_seen":"2026-09-03T01:28:53.143147Z","last_seen":"2026-09-03T01:29:56.622381Z","times_seen":2,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/tokens?chainId=1\u0026search=USDC\u0026limit=40","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.854Z","timestamp":1788398873854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/tokens?chainId=1\u0026search=USDC\u0026limit=40 HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8BHLQlqsPYZemgXEOGM%2BRybxeR5Zoe6lamGMYJuUdxoFSyEdAa6PYmCQJHGDFtAHc4Gj%2By285x%2BC0jkyCHcbBMGL5BbKaKJ1FaIYRr4%2FzZKDb6%2F77wO5N6dV9FJsjrh1MDm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9819c1f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3058,"size_decoded":1814,"mime_type":"application/json","magic":"JSON text data","md5":"ef7df2f535f712ecff49625a608895c8","sha1":"7597f2e678dac1706b38011f9fa9bbb9369db32b","sha256":"2a0dc96cc99152faa8a76bdc3d560397c93c853e180d15c3526bd2bcf3d60bfd","sha512":"9b6f8fb138baea30f0c0df6f7a88411e1f1c185b1a7b0aaaa76bcf071a93e701f95d8c8b6d2d59cf51153f20358ba650bd52f6b78aa3475650d5657bd2ecc240","ssdeep":"","tlshash":"7c5134a7da6c0a3e8b590eb2e0d7b1c9b7c6956036be0461f08e4f14c291f41d363b53","first_seen":"2026-09-03T01:28:53.144146Z","last_seen":"2026-09-03T01:29:56.608432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/tokens?chainId=1","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.858Z","timestamp":1788398873858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/tokens?chainId=1 HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIGnqK%2B%2FF5akznqfDIjmmagSvBnW0BV01zPVcUnQEt4hq7zSerk4zw7S3yZ6wSlaZHIlFiLLqCwS%2BfZ26y2ZDULlHjM56maEU8Xd9xIlOUk3DyOI5Fx7DYsOBc2mIc7db1CG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9819c225685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55291,"size_decoded":14451,"mime_type":"application/json","magic":"JSON text data","md5":"91654dc427e327ee3d9908d23804bb1c","sha1":"9671a834e0f624c47e23043da6ed799c1def611b","sha256":"bcb1710e1c52c4f9f59ca3be81ff10a56a6c2ee5f5929025f5bb8ad4830b875a","sha512":"c8c63cf13183edd46b70cdc4d1e71ca44249d3a1ca303b81564eafd7caa766942955a32245f8739e0b2b46f9f662d7093bc2802294032eebb436046fd6c2a2b0","ssdeep":"1536:JmF7zXSBrfeiQd5UjHO6gXKEDXZJWdW4FLr17q6EWftqqldYjFx0Mc8ZZRNFD6OF:JSwZylTB/YtEwUZX","tlshash":"ec4335abdeac097a8f490e76e097f1c5b7d551a026bd0462f04e8b08c3a1f52d363b56","first_seen":"2026-09-03T01:28:53.135773Z","last_seen":"2026-09-03T01:28:53.135773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/proxy-DfIhQ7Ou.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.092Z","timestamp":1788398871092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/proxy-DfIhQ7Ou.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-6f26\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V03%2BvS4w%2F0M4P0vGjyPP8%2F40elqFkREeOsm5xtZdnZNkys8MyiMUWvNV121bRD0bNfbSM6XdBwHW13oh%2BADOH6h3zatgZopsWI4TswCkhioUsbQZejhNY009b0aR5a61NNn8\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705b9e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28454,"size_decoded":11814,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28454), with no line terminators","md5":"6573770d24da44b37f4c767bde400b40","sha1":"79fa89762d19f84659bcc45aba0593e2f4566c57","sha256":"f002cd244ff0bb3a0a2e1fb64c469f485688c9758edd79d4335fcb9dd49c2dad","sha512":"2542d75331df30f6be7c3d83dedff40c9af494bf97d6a49d40e3db6004ef1d2c649477011b6b953b5ddf3e77fab4bcc4da54a5e873620b73e2cc87c777c52e4b","ssdeep":"384:LSc3gwJ7g4jENP9IX3OBQ1GZDmO+eDA8Eus8nkkCJqV5bM4S:+c3gY14TIOBQBeDfDnkkCJqV5b/S","tlshash":"60d2e79933607631d3df802e956b5b00373b20d97899802c393e99cf15b1a5992bfb7e","first_seen":"2026-09-03T01:28:53.145338Z","last_seen":"2026-09-03T01:29:56.606056Z","times_seen":2,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/index-UASAr2C8.css","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.097Z","timestamp":1788398871097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/index-UASAr2C8.css HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-1844d\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8uIKI0Ne%2BvElaGgGnd%2Bb6yBpRXwVP1lgI0JErMpuQWW2IEdCgUbicuQPCSj9OHGgjDPyqMeqGadTvK7xwurPcz6rDHVDJKRakAYhLtdRN%2BgkDrdTGkwrZLlBJOSmsNUU23A\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705ba25685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99405,"size_decoded":20149,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c293abc78f8d41b2bc96558a40916fe0","sha1":"a29bade9eee0cbbea5f2ea62f6e793e798a407f5","sha256":"37d20466e565c719c907fe49a30256c691346099932fdb7fd829ab64412de2a3","sha512":"aeab9a3e0467f2ec2b69ca2cf3538c21c2227651ddfa9204351263b2dde014d01ca9c735345f4ae3cb92da8832a2f9e15d350b25f08d98f0fbdfdfeea74b2009","ssdeep":"1536:pG2n4FY/He/42y46UYhxUuLifqDx0h6mtPHoyM:pGU4FY/He/42y46U4xUuLifqDx0hXtPm","tlshash":"59a38490f325d53bbd23b5f5d39cf48cb51ab296de2297ecba42221203c63f65c16a14","first_seen":"2026-09-03T01:28:53.146442Z","last_seen":"2026-09-03T01:29:56.618655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/thumbmark.esm-u2wUNe_4.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.300Z","timestamp":1788398873300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/thumbmark.esm-u2wUNe_4.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/assets/dynamic-labs-CNND8iW1.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-4438\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1lhk0tPgPJmxPKI%2F%2BDnq9d1OjG0Xn0wBld%2Fmkp41zA3slxjDWndNO7GAcwrpXDMADDkyWVBCLegB6qYpO7JGHCmV%2BvGUg0QbJNjlj0tkE2Bz25lMgjjdozs24gdrgM%2FMygM\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97e2bdd5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17464,"size_decoded":8182,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14874)","md5":"c2c1ba2715964a44586fe47499f745f3","sha1":"dc56fd55f384110ff6897037454cb7fa86a13f72","sha256":"df20504d3e8e5c1b6deb065bcfbbddc373717e21b45fa3cf6d16f8e13d520c66","sha512":"5cd3ec1e1c455823207865323030a9316060b13131acf1bca1c3812cb704c6f74dd5bbd0243d402ac56ab6656f923e63e546112486a02e8b7e0a242b5c4b2c72","ssdeep":"384:Dsz0nbOmhi9KZKqRxRb/9LCtXdbxKvhYKQzFf4nW:DszSFLV9Gdb8FnW","tlshash":"5672d89cb2cab0394377b53a106f114aa6377560751f8801f026d2827ef995e933feb8","first_seen":"2026-09-03T01:28:53.147488Z","last_seen":"2026-09-03T01:29:56.607849Z","times_seen":2,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/secp256k1-Cr6jnE7B.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.078Z","timestamp":1788398871078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/secp256k1-Cr6jnE7B.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-f1c2\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMUY7ANyqLykQDQN9u%2FRbf8T4tEdv9BIwZewyoeuKD%2FvHqb3HLzuwHtXSSce5zVN5Z53SvAIiQdpz%2F0nNhquwiQ9UmVGxX7NH1HYbXenmVO41qVU%2BOMZFm740PAYKAChoL22\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9703b945685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61890,"size_decoded":26494,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61888), with no line terminators","md5":"2a27e54eca21726e4e309032ab71720e","sha1":"12c6bbf9ca5e338e364dcea56d8c015ebaee8f57","sha256":"8e5d925a69148d485ccf5fa210a5978fef41dadf8949b3033583cb62389ceccd","sha512":"07533129089616997caf016e01d7e6a9bcd1001eeaa212b9730e1afe51ac49dae8eb29c937397303031d98be9588e7bd98639ff359d700d16ccae1fd5918d897","ssdeep":"1536:tpLwzx5s5IfCOHSsvD/gzOO9OkGKOvoxnYiL/opTYWTEIuhOVE:tCs5/gP0evodY2/opTtvE","tlshash":"c1531ae177a0b053c7a640eb447a5006f27dd852588d090cf2b4e8fb7ab58ac95f6f39","first_seen":"2026-09-03T01:28:53.148483Z","last_seen":"2026-09-03T01:29:56.614895Z","times_seen":2,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/useChains-ChWoeBa2.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.125Z","timestamp":1788398873125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/useChains-ChWoeBa2.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVF9kAxzCTT5M3gMk7c7LTbGmc8nBFMWmBKByPMTcyMJg3s3blNx51RS%2BpOz%2Fm6Xwsv7FMvZEqPSe1apzSz4T84RaTqP8xnk5f2%2BMyVkLfpqYeEWEvTBxBMq6%2BzohMXTcjmq\"}]}\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a908dfe-3db\"\r\ncf-ray: a350f97d0bd85685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":1338,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (987), with no line terminators","md5":"d2ab38980560a4122932cf205bb9711c","sha1":"b461c7d4a075ca8540ad893a0d3b4f062fb8f2d4","sha256":"22670b84252c11afe633125939c9ef9ee48f296ee7edc8c785ed1b78bdad4a21","sha512":"a9e465b0350fb8f5a7fae3370b54726157ce2e2b22aa3f99c656671675853b8cc9b56f8e7e886eedc84ceb9d5303a61cb3786566e8cba6fad44c0350b5410b73","ssdeep":"","tlshash":"ec1161ce7080b5b5d7800099c08b71475268a5f669c54a3cb0165e2e2e200c9d1b2f5b","first_seen":"2026-09-03T01:28:53.149481Z","last_seen":"2026-09-03T01:29:56.603333Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.824Z","timestamp":1788398873824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25284\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 09:47:53 GMT\r\nexpires: Fri, 27 Aug 2027 09:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574800\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25284,"size_decoded":26097,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25284, version 1.0","md5":"fc575ebf6f7c3646d13d9386cf8a86e0","sha1":"779e9507b31992161d36df9f8a78ee73a6e64225","sha256":"811e11966d29f3a01fcb19b087b61ac067d380665a55aebb7fcdf2cda95e4a93","sha512":"bf1f6890960e5fe79619d0a7757b95b9e422e3aa5634b1fcfe7b59f018234ec9aff01ae70d9b3593e1e5ddde78e716139c443e5ab0741a61c5d6b1637397412c","ssdeep":"384:dZgkQy8vw6D97NySvnt+kywHJ0WQ5k77oyquIw8CTTu36ioguDDYdiW3I7Oa4Leq:dmJ0G95ySAIHJvd2uIw86zioFA2OC5cL","tlshash":"63b2f14db61d308cfa05cabf0ecb8aba2031dc44bd5b39c4f217928739f6a6599c4564","first_seen":"2025-09-10T18:00:33.205576Z","last_seen":"2026-09-04T05:08:55.995425Z","times_seen":3192,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/chains","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.844Z","timestamp":1788398873844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/chains HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWHh78urCKlgLeSCEI0VuOTfpNgsMGGoZS3dIJYLkLjBR6aFdKdVSKGv%2F6ypikwwwtI5yKkWTEQMaGf8oGR8TXu98x1154PKh3AkIayTUvQwRMIFbX1ULPyQRmKM3B27kkQU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9818c1a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77745,"size_decoded":13914,"mime_type":"application/json","magic":"JSON text data","md5":"8ad411673460b432c6a5cdead6cb6977","sha1":"38a5094223fb43895793f14f843ccb723248b32e","sha256":"564d295da07e914015b4517899d2b7e609a604e0d833d1b5a18a762a7deab6ae","sha512":"1e55a2cd8770c7b0d5f4c9186b417bc88de461bed9426a496a6035c80d3e674f9c4ef96c88ea6ab62a796802c3eb9b2adf117ec9005fcf6f49a768d5880fa500","ssdeep":"1536:+LV/5eIw3oGNyg1W33e+56uz2tZNJr8VBKCT2eZzXlWWGupalatNyjtpdjVwtI7D:+LV36Oui3e+5z+zJGUCywzohuAl+otf/","tlshash":"7d7368fb072448bdcb6611d8719d36c85357b265e8d948bad0ba8908c3e1bb78117f3b","first_seen":"2026-09-03T01:28:53.150666Z","last_seen":"2026-09-03T01:28:53.150666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/color/eth.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:54.029Z","timestamp":1788398874029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/color/eth.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"401330c4281503ab9d4ce7d8862c2812b311e4d0fb94a6b92c52f6b316a5cc09\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 09D2:2A4E94:128F25:21052D:6A98C52E\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 01:27:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788398874.286014,VS0,VE170\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: db92c370f3ce15a9bdbd087848902fdfa46e6d7c\r\nexpires: Thu, 03 Sep 2026 01:32:54 GMT\r\nsource-age: 0\r\ncontent-length: 279\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":525,"size_decoded":1219,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed79179a3b6bc2c2ee4c54d8ade79b01","sha1":"14b7148647a28eb4f861f8da283a89f0acf1dec8","sha256":"1f94df8533f61806f7b17eaf9cd28678cdba66e1d82a9ca8f9fb38d35a907e9c","sha512":"590a8fde3f1bcac91ccd4dc2cc02f7ba602cc4b15f137c1f3758bcc5072c545167f7dae4c16837bde366561fd08ffdbfe5a087dee8f7e75feaec9ecc77a2fc8b","ssdeep":"","tlshash":"a5f08be95d287450682b1ffce67c98d3306771f40a3d0cf9b1800512e94995b9cd2b40","first_seen":"2023-05-10T14:51:47Z","last_seen":"2026-09-03T01:29:56.602189Z","times_seen":4340,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":179,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/utils-DVnvPSiV.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.080Z","timestamp":1788398871080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/utils-DVnvPSiV.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-d6e07\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PAsvkDHTB1LWO2XTNWenVd4Bj6A6u5CTFr41wGmJHV7AkX8l4Q4S7qhUHYbMZmLx3PLg6NkVocojyB%2FOnUCk4sBFUjuKXPFQ77nkz8UoXMrQvfmR2T5kNWVUPO89WJ5R3NWh\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9704b965685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":880135,"size_decoded":265195,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"1366e44f5d8b63e8dc7e98022af54d75","sha1":"aac234c76f7f0ea2b723b31a9e48b0f5918e4863","sha256":"19f9bfb80e3abca5a4eb1dcc6389a72c22884b6659302c847079ebcd65fa434e","sha512":"29250072d1e54523d123b3de0687662fbf5da5f121100a7b5c7064464fdda174410193ef6307cd1f92b97cc501b74aaa082a032c0751160c87821fd38a8d7145","ssdeep":"6144:tU/q2arv/MCtfijaDL2CbbB7EIbKg52m13U5YEOFFZfqVfUCfn+bnDl2Rn3U+QNp:NF+lCbbB7EItEOrWsCfHw0C5","tlshash":"1e15f68472d6f562839114e0063b680db33daa9cc41c6258f398e8e37ef96d547abf74","first_seen":"2026-09-03T01:28:53.152679Z","last_seen":"2026-09-03T01:29:56.620853Z","times_seen":2,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/settings?sdkVersion=ClientSDK%2F1.8.2","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.034Z","timestamp":1788398873034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 23:14:23 GMT","end":"Sun, 08 Nov 2026 00:14:19 GMT"},"fingerprint":{"sha1":"FF:4D:ED:ED:34:1C:CF:9C:62:A6:FE:FD:27:07:12:D8:CB:87:DA:8A","sha256":"50:4D:24:A5:35:CB:47:F8:01:C3:6C:40:4F:45:4E:57:D3:B9:E1:CF:B1:2D:2C:B7:43:CE:DD:AD:43:EC:90:E4"}}},"request":{"raw":"GET /api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/settings?sdkVersion=ClientSDK%2F1.8.2 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.1015\r\nx-dyn-request-id: r7Sn2Z0ivwdMhHCDR4Fl5P4TPH2pNO_WufFjSpHcdex9NV99iT\r\nx-dyn-session-id: upghX7hSd54LNmQ0hdoBhQbszTjlEuyT\r\nx-dyn-version: WalletKit/4.88.6\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-dyn-handled: rc-use1-999\r\naccess-control-allow-origin: https://switcher.finance\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"3420-h5QLK4JGdaxnm19j4TIfmE4I0PU\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncache-control: max-age=30\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=ibGViAe4yPL_Cgv03ofmuv_axGFF8Ifdkxn3m8rCGg0-1788398873.2504468-1.0.1.1-IDb4Vm5iSUrB7j.6SHr3eW.c_WRfBSekv2VpFLXWpr5Il9MwP9GUZRR9mNeCoaSVwPT4rxwfyceermp9zfLi1feoF7SV2xY6nJ47MP37J__8aXMVwKwC7ScyqqLHRqDS; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: a350f97dcf774e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"ibGViAe4yPL_Cgv03ofmuv_axGFF8Ifdkxn3m8rCGg0-1788398873.2504468-1.0.1.1-IDb4Vm5iSUrB7j.6SHr3eW.c_WRfBSekv2VpFLXWpr5Il9MwP9GUZRR9mNeCoaSVwPT4rxwfyceermp9zfLi1feoF7SV2xY6nJ47MP37J__8aXMVwKwC7ScyqqLHRqDS","quoted":false,"path":"/","domain":"app.dynamicauth.com","expires":"2026-09-03T01:57:53Z","raw_expires":"Thu, 03 Sep 2026 01:57:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ibGViAe4yPL_Cgv03ofmuv_axGFF8Ifdkxn3m8rCGg0-1788398873.2504468-1.0.1.1-IDb4Vm5iSUrB7j.6SHr3eW.c_WRfBSekv2VpFLXWpr5Il9MwP9GUZRR9mNeCoaSVwPT4rxwfyceermp9zfLi1feoF7SV2xY6nJ47MP37J__8aXMVwKwC7ScyqqLHRqDS; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13344,"size_decoded":4165,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bde2c44ff49bad5b247ac32d3f99af9a","sha1":"87940b2b824675ac679b5f63e1321f984e08d0f5","sha256":"ed5e5247be5a97d3a9231bcb9c3149d2d57ae33ed9747486455eb88cb82dab9d","sha512":"437dda87043ab8c9e0bf74e74d7f6b3f3124e61369c09eb94631ab6150c257a6881c93e0aa4903d4ecd2157ed70d22eda203c5aa7ac8c6d63e3eb3e772311bf9","ssdeep":"384:fzsmGvuXMkHSlgjRBrNr5rqP/FaAlaD0kdmerz57:bDGvV2Z","tlshash":"185221af15202cfd4745d1ccc4493b4b852a4831a7d62cfed0b99e9896f7fa1032693b","first_seen":"2026-09-03T01:28:53.158395Z","last_seen":"2026-09-03T01:29:56.582875Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/routes-CqRVhX8u.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.114Z","timestamp":1788398873114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/routes-CqRVhX8u.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-52cc\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KO1D%2BJM1HYbUDz3pSBm3UrFhREOOM0HpGnNu%2BcqQzy60eR6jZmFFh5ac90s1QkEn9KnFezO%2BNka0sxV3kl4AEnH9lm7ZHi9RcNohQd1K7%2FTYzgbUb%2F5LhKrf%2BQstUvFLV1pF\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97cfbd25685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21196,"size_decoded":9514,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10766)","md5":"ff25a94dddd5ca591be394a7a64cfad4","sha1":"6be98ea392c74cf3437e11286659b76653d0a543","sha256":"17343faf0610abeed92a24f0ce277e2570c00f1a855189766adcb5f9f013342a","sha512":"cbba0c4a8049f3dfea43261bfc74784b0ad155a3e0921ce536979c10d7a86e73449e1363516754eecaa70d61d3acb34c73a49cb77bb647c5961290b1f901f5c5","ssdeep":"384:dPCFVZ3Ua/uuhir4w2CUYJxxagOP0nRTCaaEeRl:dPC/2XCir4w2JOxagk0nRTCMef","tlshash":"da924c5e72003438f75f4a49a46bc20db73ba2c4e107886cb17c782a19556f697b2fda","first_seen":"2026-09-03T01:28:53.159561Z","last_seen":"2026-09-03T01:29:56.620302Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/routers","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.852Z","timestamp":1788398873852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/routers HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5ZQr70EpJzkUEyCpt3fGoK%2BoyIu%2FXJSoH2tIexw6%2FL%2F%2BcpZRIJNI9QigHQssZNxuSmnt69IgpnF3U8NIhz1Ul5kCGw5zuJNuaBI7jxr2xmVzuojlkkUomeObZTpqMMM48ja\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9819c1e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":1209,"mime_type":"application/json","magic":"JSON text data","md5":"c5f45cca800832a548d93360a0ec2212","sha1":"5b57cbdcd4f92f2bafe5da0583040ed0bc0a648d","sha256":"64e16d6bf96a692373f42e9cbdf907183f18d83be68622af1c22bc7d7338cc86","sha512":"6aca273aaf900eb92a87636572bd02f551e5ffeef7a77659ce86b83856a1d0754be96175d557cf02b02c5203cc6b81f865020704d0e167ab489d006a38c69535","ssdeep":"","tlshash":"6b01d6e21d70832442a0039305299eb24e4f9743d8c1725ba48ecd43faeda642c7e23d","first_seen":"2026-09-03T01:28:53.160674Z","last_seen":"2026-09-03T01:29:56.597926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/solanaRpc-egLCma3x.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.079Z","timestamp":1788398871079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/solanaRpc-egLCma3x.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-548\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVnKvH9k5pNaNrWTrXM9sKMeg%2BDExl6R7hA5Fmy0NqmDprOET2EFQ3QS989wHTCQSFfch90N9%2FYeihfjAKI98rb9bPuZYZXthkbEHF5lympxQCriYtthAj5aVI3f9y8ubNKs\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9703b955685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1352,"size_decoded":1478,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1352), with no line terminators","md5":"1a099cffeca5d811b32784e3d854d18b","sha1":"44ba2c9b0c0ec8e2194b70a3221b60fc82f9a152","sha256":"e2542d34ef32f0977c00d87a617e95c46fc6e912f49b01f673cecab3cf4b1fe2","sha512":"b71fed28c5201c37a021e76133d28de7baf81b2569ef215ccdb9e364968942e7be6561aa232bacb09eb290a10111efe28a7edaac9b6e4d3a2c4b202ec0980138","ssdeep":"","tlshash":"1021ede7f17efad852d244663421c800d42bb458a72c41af12aa5491ed371cf91efd1b","first_seen":"2026-09-03T01:28:53.161556Z","last_seen":"2026-09-03T01:29:56.586226Z","times_seen":2,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/utils-DBxQ7GIT.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.095Z","timestamp":1788398871095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/utils-DBxQ7GIT.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-6625\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PDIsRe6MYXixFt60Hv9gR7uy12MtQD91K86B%2FLP8jwDOfSv%2FMWCSDmT1kwfU%2BAYPcJN9KgcGol5xxjm6a75EgRfw7jXBitEeQARBr3uzIHJv9Rgx6LsFNJdyEfu6SV%2FPTqA\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705ba15685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26149,"size_decoded":9993,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26149), with no line terminators","md5":"8b9421c8ddb9da1a9450c4831524fe40","sha1":"678e0a44d93f3e17ab053f7b49f2befa27d4c23b","sha256":"0bbb4cab261dcbdef6d32cd21cbfc97194350fcdc77bbf690c96b7d5912dfe2c","sha512":"164fee96f83ffcdcbd7946ad7073651f9670438eb0ca66dfae99d971b416a80cf6d0c434929dd701cb0e852e51aba408cddb62c7e4f61e0a24b7982d0418631b","ssdeep":"384:WRBqOkhcG5QpRYxECiciuUOvRHfitiTv7tj0h8TJJoV:Exk5QpMiciiRHBTa8C","tlshash":"a1c2c7237513252a26bfd667e31ceacdd9326702c60acb19f2420b309779bf15695f0e","first_seen":"2026-09-03T01:28:53.162894Z","last_seen":"2026-09-03T01:29:56.586822Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/Web3Providers-VHsipBgf.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:52.809Z","timestamp":1788398872809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/Web3Providers-VHsipBgf.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-5456\"\r\nexpires: Fri, 03 Sep 2027 01:27:52 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4e2SHGgS%2BrSG%2FS2gK2C2PtMOQT8K2T2Goy2ISiwCemZtislHu8282WCG31rROyYQEM6cPtrDBi9G3hVnHOFdafIQR2iBy5yZ09KF52S879iGHhk861ThhhExy0Jy42FGXGJT\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97b0bcc5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21590,"size_decoded":8216,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13472)","md5":"98c57794646bfe04126eac0341b3e0de","sha1":"30912f7edf3dbcf7ef8e0f2f889acb4f35265136","sha256":"65add80b8598bf53b2c73480e8892df28de71d18e7b07f4caeb5e4997ad4651f","sha512":"39bf6657d90a2db901719069881098708e10bcb5d579d95ccbfb3937bbbf9a3619954e97b71b6efdd8a8704e1f15fb661cb0c7f69847e3148fa148a7667a73d0","ssdeep":"384:nSwWeiGv6vsEXePRg9tmjC/TV7uyq/IZbnF3XVxu:nSwWMyZePRgSjC/TBuyq/IZNvu","tlshash":"f4a2f9b3b387f011777a4019a47ea761e11a5c90b84c0d2cf2e10cb5a7b264a75e5fbd","first_seen":"2026-09-03T01:28:53.164104Z","last_seen":"2026-09-03T01:29:56.583473Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.304Z","timestamp":1788398873304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 23:14:23 GMT","end":"Sun, 08 Nov 2026 00:14:19 GMT"},"fingerprint":{"sha1":"FF:4D:ED:ED:34:1C:CF:9C:62:A6:FE:FD:27:07:12:D8:CB:87:DA:8A","sha256":"50:4D:24:A5:35:CB:47:F8:01:C3:6C:40:4F:45:4E:57:D3:B9:E1:CF:B1:2D:2C:B7:43:CE:DD:AD:43:EC:90:E4"}}},"request":{"raw":"OPTIONS /api/v0/sdk/6c67e619-c3a9-4fcd-ba8e-c1f9f5ef5610/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://switcher.finance/\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\nx-dyn-handled: rc-use1-999\r\ncache-control: no-store\r\npragma: no-cache\r\naccess-control-allow-origin: https://switcher.finance\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=iP7LT_7_SHIq3o8ZcSfOB.CnppNobDoAtHXJM4RocNU-1788398873.3057494-1.0.1.1-m.bposwlAB_PGOErOdh23_K6IYX_KyNkXlMyzDbhAfza0iuAUNEvBmKf7EJ1DZnZD99aOcAiN3Y.d5x5sjv5nj_3NCalTBiZNE9XggXDjv7ZPRCctTXp0dWgAB7PL9tu; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT\r\nx-frame-options: DENY\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Ufhn3ObA51XS4uXpPpMKLJCp1CWuBp2qzHpWauW6NNI-1788398873.3057494-1.0.1.1-aKoLzat9m_zS4xMO_J0QCSYsgmSIPI1l8cuwy1F3xFZoS2e1x0L.NVlxJ7eeO.qJ9YEuXZ3v6JU4bSciyIzcmZ7Zv8o80NzT4EFlEdN92BNNEl0WHMzu.aZbdqFaw6Vpo0WkVSoUafYyyjgIVtf_J2g4LP1fass6RdUP84wsUoJFFtsaD4Wm66MK9yB1eOlw\"}]}\r\nreporting-endpoints: cf-csp-endpoint=\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Ufhn3ObA51XS4uXpPpMKLJCp1CWuBp2qzHpWauW6NNI-1788398873.3057494-1.0.1.1-aKoLzat9m_zS4xMO_J0QCSYsgmSIPI1l8cuwy1F3xFZoS2e1x0L.NVlxJ7eeO.qJ9YEuXZ3v6JU4bSciyIzcmZ7Zv8o80NzT4EFlEdN92BNNEl0WHMzu.aZbdqFaw6Vpo0WkVSoUafYyyjgIVtf_J2g4LP1fass6RdUP84wsUoJFFtsaD4Wm66MK9yB1eOlw\"\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Ufhn3ObA51XS4uXpPpMKLJCp1CWuBp2qzHpWauW6NNI-1788398873.3057494-1.0.1.1-aKoLzat9m_zS4xMO_J0QCSYsgmSIPI1l8cuwy1F3xFZoS2e1x0L.NVlxJ7eeO.qJ9YEuXZ3v6JU4bSciyIzcmZ7Zv8o80NzT4EFlEdN92BNNEl0WHMzu.aZbdqFaw6Vpo0WkVSoUafYyyjgIVtf_J2g4LP1fass6RdUP84wsUoJFFtsaD4Wm66MK9yB1eOlw; report-to cf-csp-endpoint\r\nserver: cloudflare\r\ncf-ray: a350f97e2faa4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"iP7LT_7_SHIq3o8ZcSfOB.CnppNobDoAtHXJM4RocNU-1788398873.3057494-1.0.1.1-m.bposwlAB_PGOErOdh23_K6IYX_KyNkXlMyzDbhAfza0iuAUNEvBmKf7EJ1DZnZD99aOcAiN3Y.d5x5sjv5nj_3NCalTBiZNE9XggXDjv7ZPRCctTXp0dWgAB7PL9tu","quoted":false,"path":"/","domain":"app.dynamicauth.com","expires":"2026-09-03T01:57:53Z","raw_expires":"Thu, 03 Sep 2026 01:57:53 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=iP7LT_7_SHIq3o8ZcSfOB.CnppNobDoAtHXJM4RocNU-1788398873.3057494-1.0.1.1-m.bposwlAB_PGOErOdh23_K6IYX_KyNkXlMyzDbhAfza0iuAUNEvBmKf7EJ1DZnZD99aOcAiN3Y.d5x5sjv5nj_3NCalTBiZNE9XggXDjv7ZPRCctTXp0dWgAB7PL9tu; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 03 Sep 2026 01:57:53 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2323,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T06:58:29.081316Z","times_seen":18268882,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/trustwallet/assets/master/blockchains/ethereum/assets/0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48/logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:54.604Z","timestamp":1788398874604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /trustwallet/assets/master/blockchains/ethereum/assets/0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48/logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"bb7308f09a04eb37cbdc89289a03eee66583a37c2adbbf29bae5d7a26551a8f0\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 7C68:1C39CA:8C4DC7:F65786:6A8CA37C\r\nx-github-edge-region: swedencentral\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 01:27:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1788398875.608623,VS0,VE138\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 448d54739f748a4b68804e15d7644fc6d29622c2\r\nexpires: Thu, 03 Sep 2026 01:32:54 GMT\r\nsource-age: 0\r\ncontent-length: 9276\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9276,"size_decoded":10189,"mime_type":"image/png","magic":"PNG image data, 181 x 181, 8-bit/color RGBA, non-interlaced","md5":"bb400a72232101f48b1a16e52ab18fda","sha1":"25ee99942134fca6167e3beefcd377443ce1273e","sha256":"6d14601d0b1109046e366592b8c0f256ffb075f69180b65dddd97ae665d49f9e","sha512":"86479d8136144517d960978e01640b6f935b1056297846f5e2e136e5f37b671054aa067e9fce793db0f7eebb8b7fd420f3ec5be89dca41baa6e695ead9e8e500","ssdeep":"192:Yj9GF6d6C44reHkPWsuT3skx6kY+ur1GtuoPVS3OgmgHCNEZsK:Yjwsd6n4qwWsxw6C2AMoMOgmgiNI","tlshash":"de12af851657c48d77302a070e062be6337c02264b5bd368badb85a7bd43a25e63df47","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-09-03T02:28:59.380144Z","times_seen":1684,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/use-transform-4uIeBv_c.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.118Z","timestamp":1788398873118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/use-transform-4uIeBv_c.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-51c\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxhGzfM910AAgT1LyZv7R%2BXbb4juIgTLD0mV7TwYFrV9Ff7mbJprPnfoaiLX0hs5PNoLfbOeTg%2FHgU%2FnjGr279nI558pB8H%2FXhKQW7TVN8I0RZaNQmpsjFTurvbBSeop63Iw\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97cfbd35685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1308,"size_decoded":1472,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1308), with no line terminators","md5":"e25d4fea20d8d2ab7a18450ed38ba064","sha1":"24882753fab472e6290b214f96a3c8a42675755c","sha256":"81926c88d6f2d43b386524ae692ab06c83af832b17769343dfc0d3274d6b7274","sha512":"4acd85da60e6008ad5679462ffeef78fe9e5f23cd119938149e38cdd4a66dcbee2d6313a7b310fd2be7dee83c9430c60f24549231351a5c182fb10a918c7f6d5","ssdeep":"","tlshash":"0421fedc72c3f070e75992a5c06bc568f63a6865144d422cd19828fb362019ac6ebf3e","first_seen":"2026-09-03T01:28:53.166817Z","last_seen":"2026-09-03T01:29:56.601011Z","times_seen":2,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.826Z","timestamp":1788398873826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25284\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 09:47:53 GMT\r\nexpires: Fri, 27 Aug 2027 09:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574800\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25284,"size_decoded":26097,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25284, version 1.0","md5":"fc575ebf6f7c3646d13d9386cf8a86e0","sha1":"779e9507b31992161d36df9f8a78ee73a6e64225","sha256":"811e11966d29f3a01fcb19b087b61ac067d380665a55aebb7fcdf2cda95e4a93","sha512":"bf1f6890960e5fe79619d0a7757b95b9e422e3aa5634b1fcfe7b59f018234ec9aff01ae70d9b3593e1e5ddde78e716139c443e5ab0741a61c5d6b1637397412c","ssdeep":"384:dZgkQy8vw6D97NySvnt+kywHJ0WQ5k77oyquIw8CTTu36ioguDDYdiW3I7Oa4Leq:dmJ0G95ySAIHJvd2uIw86zioFA2OC5cL","tlshash":"63b2f14db61d308cfa05cabf0ecb8aba2031dc44bd5b39c4f217928739f6a6599c4564","first_seen":"2025-09-10T18:00:33.205576Z","last_seen":"2026-09-04T05:08:55.995425Z","times_seen":3192,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/transaction-DQ7Z8YDD.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.087Z","timestamp":1788398871087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/transaction-DQ7Z8YDD.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-3df0b\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmsVRZCkVbKnR1poOczby3FSHbGCfdWNPRJOdpoM9V%2FdQy3KB84mGodQjanDkYR2aFODFwsrHBpjmOtkEOt5OekwOzWkneqmiJfU%2BeaStKYIRDaKf0FIznFarSEqc9U9VWHt\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9704b9a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253707,"size_decoded":86707,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65359)","md5":"c0d4f6226aa523beab38de95731bacec","sha1":"b56bcad988bd7a3ef9752b3fff61c77c879f9891","sha256":"975b729d9ee26c4834e260bb7681e056d5385e05e86b0d9c7456dd38f172ff6a","sha512":"418f30d5c987ba780a1fb8dfa8481db7973a3082a354006994525b5335b9177831f8a11ffabc197f02b4fc71cf27aafd7fcc5381ea4156ff9f8ee1842c682eca","ssdeep":"6144:VgHdSs1a1RaBcQut8ptuBXWPzS0g1S0i/jlY+uyxNH/96ylpwwqvHgmn7U:VgHdSs1a1RaBXugrGSD/jlY+uyxNH/9x","tlshash":"fe440a96b755f06283da50a640b65005f33ce8a6448c481cf164acdf3af5ad4ebfaf39","first_seen":"2026-09-03T01:28:53.16783Z","last_seen":"2026-09-03T01:29:56.610033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/getConnectorClient-DjveJ3zd.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.090Z","timestamp":1788398871090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/getConnectorClient-DjveJ3zd.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-423\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwSzzBMH7yvCYDI1dtjUttDUoW1GVn7ObDEDbvW5UWASu7KnbBdMVOyikrjId6J%2BNs30oE4T7ca2lg%2FalsL%2FrDfxqZBRUBixKk%2FIoRV%2B7ARzaR%2Frz2GR86cPT4b9f3HTSeUu\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705b9d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1059,"size_decoded":1333,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1059), with no line terminators","md5":"0d2867276995a62c4a606fa12e99da1f","sha1":"64f9b94011e25c444dcdc578192d1224a63a6fa2","sha256":"e371277d32ee18b520beadc62a4695b3d6102b4e5e7653ebf4ad48b9aa2fa4c3","sha512":"3cdfa7544369143f4c52e63db7844a8dc394ce9fa961c3816233197a52bd5afc42df22e6ae6c07d65e2ea02b1797161e9e706c80faa93d838fad2e32fda01ed1","ssdeep":"","tlshash":"6811adf005f5757dcb47280ca080a219416185dbdb59025c2f92842fdaf83c9efe8f9b","first_seen":"2026-09-03T01:28:53.169297Z","last_seen":"2026-09-03T01:29:56.607202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:52.514Z","timestamp":1788398872514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 09:35:23 GMT","end":"Wed, 25 Nov 2026 10:35:09 GMT"},"fingerprint":{"sha1":"85:5C:D6:D0:43:0C:B1:29:80:EB:BB:4B:04:FC:BA:6A:46:23:03:66","sha256":"E8:5E:D2:19:4E:AA:3A:D7:E3:03:C1:30:7A:A7:26:2E:AF:6F:EE:41:65:A2:45:ED:FC:1C:DA:45:69:F8:0A:42"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 01:27:52 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=l4m_WHRWMKODJiNZd_vBWELY1AlKbY3hQ7tLR_zL8FE-1788398872.5283756-1.0.1.1-RqM3PWmrlBSIpsmLJG4cTgXo1bJ0SPosvrcvWVTYwlk0S1nuNNMV9yCUXnd913CcTh8_uooAKzaCQulXo5zwKWCg2cnWyd4cs37WxwhIIq1yF3yAVDrxu2kx4ZnmupXB; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Thu, 03 Sep 2026 01:57:52 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Mon, 24 Aug 2026 17:07:34 GMT\r\nx-static-request-id: CHX8BS8KP6C1WB3V\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncache-control: public, max-age=600\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 806188\r\nexpires: Thu, 03 Sep 2026 01:37:52 GMT\r\ncf-cache-status: HIT\r\netag: W/\"18b98fc8171fd10263c4f1625eb16faf\"\r\ncontent-encoding: br\r\ncf-ray: a350f9794814783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"l4m_WHRWMKODJiNZd_vBWELY1AlKbY3hQ7tLR_zL8FE-1788398872.5283756-1.0.1.1-RqM3PWmrlBSIpsmLJG4cTgXo1bJ0SPosvrcvWVTYwlk0S1nuNNMV9yCUXnd913CcTh8_uooAKzaCQulXo5zwKWCg2cnWyd4cs37WxwhIIq1yF3yAVDrxu2kx4ZnmupXB","quoted":false,"path":"/","domain":"dynamic-static-assets.com","expires":"2026-09-03T01:57:52Z","raw_expires":"Thu, 03 Sep 2026 01:57:52 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=l4m_WHRWMKODJiNZd_vBWELY1AlKbY3hQ7tLR_zL8FE-1788398872.5283756-1.0.1.1-RqM3PWmrlBSIpsmLJG4cTgXo1bJ0SPosvrcvWVTYwlk0S1nuNNMV9yCUXnd913CcTh8_uooAKzaCQulXo5zwKWCg2cnWyd4cs37WxwhIIq1yF3yAVDrxu2kx4ZnmupXB; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Thu, 03 Sep 2026 01:57:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":787823,"size_decoded":80357,"mime_type":"application/json","magic":"JSON text data","md5":"18b98fc8171fd10263c4f1625eb16faf","sha1":"5e7e781889e250c22e3dd811a099c9db25fcbff1","sha256":"5c9395904e3d13907d04789e51b7cc534a8802101ca6f12e19cc7e5a54a26e9e","sha512":"6d331c7942c5fa3b83d1a5ca3ed95f63849bda76741f072443b35fda0b5d327c235277c5f8fdbf64700070437b41953dcf8ff0deb3573f840c29bf646b287a68","ssdeep":"3072:bQdHp1sY+27R39fnaG2cJU8eaftX9xKKiKA:bQdJ1sY+27R31PJ4af3xKKiKA","tlshash":"b3f46184c6200d8210b5e359dcaed4d6a424d6578eda38683bbc45bc4f6c86f25fcafd","first_seen":"2026-08-07T02:26:45.140072Z","last_seen":"2026-09-03T01:29:56.606641Z","times_seen":6,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":56,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/wagmi-config-CrnY4DRp.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:52.810Z","timestamp":1788398872810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/wagmi-config-CrnY4DRp.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-4d54\"\r\nexpires: Fri, 03 Sep 2027 01:27:52 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5hwYQ4r14Ise4N0OsFUjGthbdUVuKoZL%2FtRg4P3VQ52V09q0QF8Dtw5ZjMlJKwZn9Ar9R3m7VdfGVGp7Dgu1VLW19hr9zfL%2F89Luph%2BJkOxolbpMrN708MB1hgHwkX1hRDj\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97b1bcd5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19796,"size_decoded":8405,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19796), with no line terminators","md5":"c9b0c7fb17e4c0dd4080e9a3d39b2568","sha1":"2e38378509256c4741cb3f1f5a16b9bf91c7fb4a","sha256":"569af7d3adf4e73a509a6ceaee7cd98f9dc262beb3290cda81c728036351c0e4","sha512":"f7002b8b3ae29778fd6a3b42c1cf2ce9da3c66c2cb13f19827ab931c16c0d98bbe2fffc9d5d26c12ee8995aadbcc3eb4275aed57fe1caf6bf628dfcabe456eef","ssdeep":"384:9BzYOka7dSmXpeZwMrwW1eHGGbc/YO9vyaXbbCOhn:9B0Oka7dSmXpsjrwW1eHGeeh","tlshash":"2192f7f232d2b1715bdb108d34995008f22c89d8b50d002cfa6189f6a5b9ad7d7f6fe6","first_seen":"2026-09-03T01:28:53.173422Z","last_seen":"2026-09-03T01:29:56.587894Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/TransactionModal-C1cd8TS9.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.126Z","timestamp":1788398873126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/TransactionModal-C1cd8TS9.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-a4c7\"\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRpEFxSJIS3ApBFvVf4ZaYqvTQUIOsaHH6a2bGZmOPEr%2BVPkdYOtZdd0AeulN3eDvKd65OgiN59bBx1kI61zA4oXNi0SB8LfTupRBGQPVtz29WOfDh9vNUmT7BR1J0kBDe%2FC\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f97d0bd95685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42183,"size_decoded":14587,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42169), with no line terminators","md5":"2496a17f03cfd8b9060271bd4d23ff62","sha1":"0834ca563ff7b278ed59232f0b1ae86c3c58c169","sha256":"f8515c82f19cebdc2ef36b640defb4b87d55b116d6ce3b29cc48dbba40b4163e","sha512":"6dd3f2e5822cde783e1d882bee952fe64f8fdf1eb6ae8683a723cd6053172330c03cb6983e3f75685a342722ce2a2fd8d1d5cdd48b970409aa08bf816db689e0","ssdeep":"768:R4+Io7L+i7XFY4t913VrTTGa3LN+8H/7igN8gNyI8Gdm5/k4d1b2bw:R4+H7XFY4vjTGa3BLH/OOyVGY","tlshash":"7e13f8f6b3667178e6a6041471cb9118e22fd795cc1a00bcf2bd685363e9484eed6fc8","first_seen":"2026-09-03T01:28:53.175128Z","last_seen":"2026-09-03T01:29:56.583994Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/color/matic.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:54.031Z","timestamp":1788398874031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/color/matic.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"072b286746159d0e24c5b2093ca4c808246f956a3a5a28de88366005474789a7\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: D0EE:24A3FF:12788B:20EDF4:6A98C52E\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 01:27:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788398874.058492,VS0,VE153\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 07e5088556f7bd91ab8dcc00bf9d20ed045a8dfd\r\nexpires: Thu, 03 Sep 2026 01:32:54 GMT\r\nsource-age: 0\r\ncontent-length: 477\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1016,"size_decoded":1417,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"095ffad213750345fe1b2fd3cde188fd","sha1":"12fa14ea3f601515e05091704e79fef67a8371e2","sha256":"479d03ee43daed6989b6debeff4ca7710411366fec06d9d7641f44710ea80117","sha512":"cafd10c7bf9711b55b5bfc06ea6b8ce41510e38b2f27907d429cbdef2d15ea0cd72254d877cc6ae2dfe7854adb8b27d9fb767ca5cfe30de6154a1b4f7d4c3b44","ssdeep":"","tlshash":"f511afda3134b9494acfdc16de4feda9f10e1048bdaa017510bd4a95d7c7ec6e214644","first_seen":"2025-05-18T01:44:37.239535Z","last_seen":"2026-09-03T01:29:56.618137Z","times_seen":39,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":162,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/logs/visitor","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:54.134Z","timestamp":1788398874134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"POST /api/logs/visitor HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nContent-Length: 443\r\nOrigin: https://switcher.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":443,"data":"{\"visitorId\":\"6581775425002237759\",\"fingerprint\":\"a922104131de99e457d4cf3c0b7ba777ccc75b051b5396779db0d2f8b08be0d3\",\"referrer\":\"direct\",\"isHuman\":false,\"walletDetected\":false,\"extensions\":[],\"providerIds\":[],\"sessionActiveSec\":0,\"interactions\":0,\"pagesViewed\":1,\"browser\":\"Firefox\",\"deviceType\":\"Desktop\",\"os\":\"Windows 10\",\"timezone\":\"UTC\",\"languages\":\"en-US,en\",\"gpu\":\"llvmpipe, or similar\",\"screen\":\"1280x1024@1\",\"domain\":\"switcher.finance\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:54 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7zJLmyCRtnio3v8Hy9yoZjmFeWH%2FqwzY4Hy6iIpqiKRnrPeVQfkwYMNg%2FuwzZePJPzQJVEBOcSpaxtILJdE0kwPayxbSmyUZTu6r1xzvLZvxw1QrTWC%2FOXhR1lMzUAPY%2BLS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9835c295685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":924,"mime_type":"application/json","magic":"JSON text data","md5":"187e40035d72ec1c8898f9171691e19f","sha1":"398bee6c70354046a50fff6e5d98b1339df6bcef","sha256":"88534d4633f25d40d28c791b84cb0452ecc9690709983ad7a49b3ad42aa6eaa4","sha512":"4b0088531d76f06e2a3c7293340780ad42b9f75e9f610ef2dc1f045fa7d87a823d72f84ebbe2a810a9d83155101650351f3dbd21410ba4c10399ae8d9b22d75b","ssdeep":"","tlshash":"92800008000a0ea88000a2020280fb020aab0832200020acf3bae20022a320e2202c03","first_seen":"2026-09-03T01:28:53.178593Z","last_seen":"2026-09-03T01:29:56.619546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swcamp901.top/","fqdn":"swcamp901.top","domain":"swcamp901.top","tld":"top"},"ip":{"addr":"35.214.135.205","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T01:27:50.126Z","timestamp":1788398870126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.swcamp901.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 21:13:17 GMT","end":"Fri, 20 Nov 2026 21:13:16 GMT"},"fingerprint":{"sha1":"08:62:1A:97:71:80:A1:A9:37:14:92:FA:4F:D3:3D:11:FE:24:60:81","sha256":"34:55:37:C4:E0:AA:55:E4:0D:F4:73:4B:C2:E2:6A:D2:EC:22:0F:2A:4A:DB:C4:82:77:33:82:68:F4:57:BB:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swcamp901.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 01:27:50 GMT\r\ncontent-type: text/plain\r\ncontent-length: 24\r\nlocation: https://switcher.finance/\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T06:58:29.081316Z","times_seen":18268882,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":75,"connect":20,"send":0,"wait":20,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/GlassCard-DmLHIH8d.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.124Z","timestamp":1788398873124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/GlassCard-DmLHIH8d.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n275%2BlWkdkd1iZlfN4kn5LAbDugmoIyxky63wYtSEnMo26id3I9uxWZsjyyYzORxL7Md4NuASylDGyUIgne7RYUxtkn0SONunAeAACHtnij8qZgxiQJo9hk3nDeZycjqcry5\"}]}\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 03 Sep 2027 01:27:53 GMT\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=1,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a908dfe-1a0\"\r\ncf-ray: a350f97d0bd75685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416,"size_decoded":1046,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (416), with no line terminators","md5":"b688bd80562bd95059e90bc2c401ec48","sha1":"35dd1e0e74412a46eb5211e0ab3396acbec8f2bc","sha256":"031ba70c0638bb03fea6e445fb3c2ac15375adfa60cdc5c624cf725a2e9a15bf","sha512":"ba4a0c9117fb22e9f55ad929c432d30941de9541a8d07419a2294d3343a92c289995bd785f49b758f1ab1a1ce602210bd8d3a7274009e2c1e5a81f8dd592bef8","ssdeep":"","tlshash":"fee0ab9551856dbcbe1f06ba921cd6ef7136aa5c9589431995c2692403105f1531e888","first_seen":"2026-09-03T01:28:53.179864Z","last_seen":"2026-09-03T01:29:56.617567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/tokens?chainId=137\u0026search=ETH\u0026limit=40","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.855Z","timestamp":1788398873855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/tokens?chainId=137\u0026search=ETH\u0026limit=40 HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BMSgKyP7OX5aZ0uhQAQYclsA7Ot5Wcng4p2YxJBxUxlQWHsNzzqCK1iODXmLLBKybdm1GsBgjYSXTd%2BC%2BNaKkkNzkH5kEBOemBwzgprTsEm5ojFQjWS6rj%2B1q7J5LdEGIQn2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9819c205685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3620,"size_decoded":2015,"mime_type":"application/json","magic":"JSON text data","md5":"35ec5143a6d29ba0845a41b8092d26a9","sha1":"a75d26d8d39a538128a552f58506afb3ece6b669","sha256":"ff0c2c6ae2bb7f987e67c29d71a056c74731015113054b9123cab9c74801a689","sha512":"c5536524fdde12cf9e6a29e1586f07d810ad8f2453e3cc2955651c5c435b7ec7b53520a3e33b9bb178d3c5cd55c363d3d7670be92612f094f4f6aafe35ec8b6b","ssdeep":"","tlshash":"837155abda7c08bd4b550fb6e19be0c0bbd9a169367d00a3f44b8a48c251f11e393756","first_seen":"2026-09-03T01:28:53.181274Z","last_seen":"2026-09-03T01:29:56.604072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T01:27:50.314Z","timestamp":1788398870314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 27 Aug 2026 19:20:28 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBbqHdJhZuijQohfSbdxJRmkG3N6YeTQMpzHsdfZFy9nevPCooUESJmPH3sv1%2B1IdxKCyfi4EHJ%2BtZ6ZeG2kvKuYWfSPprslIkaWZf5hv%2FTqPnOsIeHJ8sk2u1tdw6pG9zSo\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a350f96ceb8e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6884,"size_decoded":2745,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"394809cdaad19bbdfb00f5c088543384","sha1":"b0e4408439eef0887f9fcb35933b0ba92426a1b0","sha256":"565bb2447f558aa28a0dd441c7d07de7165f0bd9b4f2221929b9d7b1c1b47474","sha512":"5ff650a7211760b5bb8b88f827717555a31f53c90e8b4fa75c2f619bd835518de5ec1c797eef21f993b6267a7f466fdf5f445ecf2e19a1f4219d6034211f96f4","ssdeep":"48:0dilkk0T7GQ6cSJnLJLUGNWucpg5yXNXNKNxKurmSkpZb8YSO6wsktbg243/FKd1:5mT7vSJnlZNWucpIliZgYSnktk93dyyC","tlshash":"bce16565baf0880713228278a9d7f418f955f24b8118dd28f1ed62bdcf50f924ab3769","first_seen":"2026-09-03T01:28:53.182268Z","last_seen":"2026-09-03T01:29:56.625489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":218,"connect":12,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/assets/vendor-gsap-l3PWEo_4.js","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:51.093Z","timestamp":1788398871093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /assets/vendor-gsap-l3PWEo_4.js HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: W/\"6a908dfe-1b8b3\"\r\nexpires: Fri, 03 Sep 2027 01:27:51 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zB4ipZprPCjeUU3JF3rt68l%2BlIIOUTdrG%2FReCUe4Cjxrq1x9qY9OiGHvR806MpTUYkTtmHXPkIiS%2BvTWRZJzEsbCBHBRZ7WIwGgLTpz6B22AVOSK8YJeakESEI664GixAGJ1\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9705b9f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112819,"size_decoded":50719,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bb0df65b89360c8ffbf57e4342cc15f3","sha1":"cc505b12a6d821bb64c200dd4a31bb3c669a49b2","sha256":"41e31db10363d6a9255802898f47e07a407793066ee19ae9f57711e3083eca57","sha512":"37e13dcb61f65fa112f90ff9fa31580b7247a701b4f8d9cc69b18b59684af492aadc4bb44beda40083959c6374a6f489c41f4fbf297c82a00944e609e14a9c96","ssdeep":"1536:0K1MI1eNtTYh6HS0nv/Vt4p8Dp//QPdKcm0eQ771qiO66JxsNjHPce385C5:VMIQ3TYhUTB+PdKc4Qf1BTBPjMc","tlshash":"13b3f8ca3282b062179bb2b1443f160bb3379994680e061cf129d5d83d3d999977bfbd","first_seen":"2026-09-03T01:28:53.183393Z","last_seen":"2026-09-03T01:29:56.616827Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/favicon.svg","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:52.042Z","timestamp":1788398872042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 27 Aug 2026 19:20:30 GMT\r\netag: \"6a908dfe-615\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zu7W9D%2BIdXvoBYilr3GF7kk9ZZfnHvp1cd4zWcATDUyL7ToYnnqYLON1ot%2FosEPVzIsPjqDYbgpdJ7dFJQynOKyytjO3n8G1CyAE9Kjf6SXKR7n2CPNrYZc0JbTvqiy96W0Y\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9764bb05685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1557,"size_decoded":1652,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7276f4f9da316129e8b74cdab8e75017","sha1":"db8868abf009fdcd79c4c218f2b3caca45e941cc","sha256":"92ca06380bd810d63f9bdbbab2b22441a56365899c20415eec2263b617b4e28c","sha512":"25aa1567dded57b63f047d8967f9475db3f9ca118c2e77ce9686229faba05aec2eadb056dd5da5a4f4361540caff90b8c162e61d6e24af94f48793d34524502f","ssdeep":"","tlshash":"bb3167d6616c71f1f14edfd0d8392451b69f18f67f25d5c412d824a4d62625ecc6ccc4","first_seen":"2026-09-03T01:28:53.122676Z","last_seen":"2026-09-03T01:29:56.600415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switcher.finance/api/tokens?chainId=1\u0026search=USDC\u0026limit=40","fqdn":"switcher.finance","domain":"switcher.finance","tld":"finance"},"ip":{"addr":"172.67.139.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:53.856Z","timestamp":1788398873856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switcher.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 18:57:01 GMT","end":"Sun, 08 Nov 2026 19:50:36 GMT"},"fingerprint":{"sha1":"F2:73:C7:09:43:53:FF:D2:C7:A0:70:67:8D:60:6F:C7:4B:35:21:C8","sha256":"3C:CC:CC:BB:B1:95:6C:EB:B9:7E:28:E6:EB:3C:69:DE:2B:2D:9C:5F:1B:49:70:B4:F4:D4:45:32:5D:72:73:13"}}},"request":{"raw":"GET /api/tokens?chainId=1\u0026search=USDC\u0026limit=40 HTTP/1.1\r\nHost: switcher.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 01:27:53 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpndWmZlb1AQsNgFyv%2FzpKoEk52BPzMgE%2FzS9OICliqNlKzkUB8CAUR8sqt8C57%2BOccNxrUAIJ2bXJ%2FnasTCEtzRmUGHfZwA5jVL6VKltcQAFLVKy%2BOiFbKacjB%2BpljLnJm%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a350f9819c215685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3058,"size_decoded":1818,"mime_type":"application/json","magic":"JSON text data","md5":"ef7df2f535f712ecff49625a608895c8","sha1":"7597f2e678dac1706b38011f9fa9bbb9369db32b","sha256":"2a0dc96cc99152faa8a76bdc3d560397c93c853e180d15c3526bd2bcf3d60bfd","sha512":"9b6f8fb138baea30f0c0df6f7a88411e1f1c185b1a7b0aaaa76bcf071a93e701f95d8c8b6d2d59cf51153f20358ba650bd52f6b78aa3475650d5657bd2ecc240","ssdeep":"","tlshash":"7c5134a7da6c0a3e8b590eb2e0d7b1c9b7c6956036be0461f08e4f14c291f41d363b53","first_seen":"2026-09-03T01:28:53.144146Z","last_seen":"2026-09-03T01:29:56.608432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"switcher.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/refs/heads/master/svg/color/usdc.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switcher.finance/","date":"2026-09-03T01:27:54.027Z","timestamp":1788398874027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/refs/heads/master/svg/color/usdc.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switcher.finance/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"2e87b40a0eb4d62c63ffc8104a9c9552b282c09c0ffdd72b36254bb8e686b361\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 317E:24A3FF:12788B:20EDF3:6A98C52E\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 01:27:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1788398874.055959,VS0,VE156\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 6d92c2f603d95f7df46c358366cc4e240e57d352\r\nexpires: Thu, 03 Sep 2026 01:32:54 GMT\r\nsource-age: 0\r\ncontent-length: 726\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1454,"size_decoded":1666,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bc59a3a2071fd7c268ebdb58658e588","sha1":"84c6c5b0793fd20959241d88a38915ee48feff7f","sha256":"7281e8cadfe9abc14e98b15b05cdc24cc24d68533a51e746141d4d98f2ca2bc8","sha512":"90b9371c1b18516488673440e20316bc9cd09cabb3c37104e8a89befac06194a513704cfb415cbe4d545cfef666390d62797b105cd69e56868da94ba494306bd","ssdeep":"","tlshash":"b73162c6b1703714b89bcb46dfb1a9d4238f94bf1afac2c162cc8b0cd08ea917208d10","first_seen":"2025-09-17T18:10:57.098012Z","last_seen":"2026-09-03T01:29:56.601619Z","times_seen":4135,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":165,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}