{"report_id":"13db479e-8753-410f-ba40-c350f4d7818a","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-03-03T17:23:18Z","url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"104.21.44.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"title":"Buy \u0026 Sell Bitcoin, Ethereum | Cryptocurrency Exchange | EgonSwap","dom":{"size":170941,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5917)","md5":"9d42ba96f00f61a41d7d00a6998e9b3f","sha1":"fd7f013a1c02f9a730e6c1058c25b33e941798db","sha256":"dbc2c615d5e30177693fef7c2896e8e12084edef5377dff553208ed2f21c36ac","sha512":"454c8282d83d5a6e94329957264058a80ad226a61ef05c3428f244a426dc41e1e966dc6ae9d55937b7371303e96324fb86bf4d50b340ce230dcfe679715e2b8d","ssdeep":"1536:OqWxqZJ4449uy38BJPhBKcL54BfUNMbpYGu2glhr4HEBiuMeLZ49Q600Co6zzcrV:JWDuy38BlhBKs+BfAh0iik5SRfGhvXSh","tlshash":"e0f3c57091f11452404383a9bbb7db1b2a61d003eb0eda54b6fc6ad48fd6dc2cd93a5e","dom_hash":"domhashb3ba5b9ff2eb9abe026f401cfa6dd491","first_seen":"2026-03-03T17:23:28.519764Z","last_seen":"2026-03-03T17:23:28.519764Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"104.21.44.98","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T17:23:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"egonswap.org","ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-13","domain_rank":0,"first_seen":"2026-03-03T17:23:21.661802Z","last_seen":"2026-03-03T17:23:21.661802Z","alert_count":213,"request_count":53,"received_data":6369834,"sent_data":26813,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":3,"received_data":131913,"sent_data":1641,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.binance.com","ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-03-03T17:22:01.651616Z","alert_count":0,"request_count":9,"received_data":41215,"sent_data":4236,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":1,"received_data":88167,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":2,"received_data":174586,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":34196,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.static-global.com","ip":{"addr":"3.173.161.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2023-03-16","domain_rank":0,"first_seen":"2023-04-15T01:03:17Z","last_seen":"2026-02-28T15:39:47.272563Z","alert_count":0,"request_count":6,"received_data":377561,"sent_data":3326,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":2,"received_data":654192,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.okx.com","ip":{"addr":"104.18.43.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-07-03","domain_rank":29351,"first_seen":"2019-04-12T18:26:11Z","last_seen":"2026-02-27T06:59:55.083351Z","alert_count":0,"request_count":2,"received_data":517927,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-07T13:44:15.768412Z","times_seen":2331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7cc961167a650a756584b3e539221fbb","sha1":"e99d8df2fc700ab8881812c52f0c1887327345d6","sha256":"c2579194b2a347219916b2e9a0d96f565693eb77ff57845bf82a395fd7b578f9","sha512":"1c7272cdf1f46b5d09bad795cd88bb67f4702654b77c26978e48eb1ed03016eb167ddc2bcf8764fcefcce0ee1783620ad0440c2151fb66a2391ad0e213876eab","ssdeep":"","tlshash":"dd21b4044070016209b2662a1f2ea310656252474debbc34389c8a849f6911f86b87f5","size":1192,"data":"","first_seen":"2025-09-28T21:46:44.478624Z","last_seen":"2026-05-25T10:16:26.616079Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/js/toastr.js","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-06T22:46:35.600971Z","times_seen":970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/js/main.js?v=3","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b10fc4cc7e2243b75fa9b1871713bff3","sha1":"17cd917a6f52e67ddfd6f46e10d5bcffc3c75987","sha256":"9e354a7b686dbe2fb030229b88aa6d30751d5669e319cebd0f329a0a7b4ba1d2","sha512":"d05cd8fc85e3e60207933adde1c65fc84314ae0335b922fc3b6e9aa7eadfd28984958966199cfd9234263f98430d37998dc0f7a6f2eb4c7836d7fab03825fba3","ssdeep":"768:GXKko7s81DlcUQwlWTldlIlhlfl0dnknyc7aS:GXK57s8cdw","tlshash":"79c2a6a872b114a58237737d7eab5a46f6342027d201d749bdac0ed01ff2190d9d2fae","size":26617,"data":"","first_seen":"2026-01-22T14:55:17.961331Z","last_seen":"2026-03-03T17:47:16.417429Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-07T20:24:24.921133Z","times_seen":184427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-07T20:21:37.926881Z","times_seen":26710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d450bea2ae4b035e95c4bf621486c13","sha1":"3567c232074d9d2f96b7d4ce489a61c2d933a606","sha256":"d6fb2166159f96b4e113a78266e6b2591ff8a549d647ae58e0c743b5832db5fd","sha512":"8738ca7fc79b4ff1fb451c923c83c58eb9db9c399cb63e1c61c3b340a678d7069744c42f2ea78406b459a56e924e36c8df341ef1f7d45cf7969772015e8eb69f","ssdeep":"","tlshash":"c5e02b8b370f4c71549ba6872f7f7305f843213b99a1a421295d6204cf61e17a304cd0","size":295,"data":"","first_seen":"2025-06-19T20:02:29.562271Z","last_seen":"2026-06-05T15:12:51.796161Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf2d6add836b79af8754a438e13c9b0d","sha1":"39154d7a57dde0559a640098c246f87b6c1936c4","sha256":"fb763efdedad293cff0e2c2819b6a120996e5cfc9f482ef2d71a0fa4f125acc6","sha512":"b42ec4c430d2a112c0327b810d3417f26248bfed68deff49d3704a1179bc434bc2ceb846d1b8c3d71d1c237db1a2ff94764a2b919ef3f541fca41ee0cd941d10","ssdeep":"","tlshash":"493122adc1b1163501b3b16b13af996d293114a7b184c93d3eafdfc01fa5490a4a2eda","size":1584,"data":"","first_seen":"2025-06-23T06:39:13.041176Z","last_seen":"2026-04-14T13:37:51.795083Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"128c6aaa4058b5c1034115795c345c84","sha1":"120e8ecddc98a1a9ffaa62487f152822b36dc2b0","sha256":"4fa3178d33fe7544973a2a07f1ac3aeae4cfa201c1a4d1448168bd7847c4a885","sha512":"48ffc5e0bb858899157a1851c6f9e071e14c648b250a7edd72d7704718713c77d698986178580f02c06c18fae1c916cd9bd17a55a0d8f25ef73cba95b87df9fa","ssdeep":"","tlshash":"a101446e2ca3f09632fa316d8ba752692332060b3581d905ba4dc5002fe9d5f6c56a8e","size":760,"data":"","first_seen":"2025-07-06T22:02:01.363565Z","last_seen":"2026-04-14T13:37:51.796553Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe8462dc5678e9f3091b64ec50361a58","sha1":"506e741fb2c2e2dc13ce89456af416e3b78c5823","sha256":"a2a2a71a1bfc6599fe99d8a524df0aca331deb4d217df2fd755aaa0fc2acde36","sha512":"2c039d3c82a63c59bb3cf427f0205599ccce4c78fcd376e982871a894ebc2073b25e959ac5768bcb392d80efd6f78a99dfed7755c5a2912aca889ad8b4b89048","ssdeep":"","tlshash":"4c01991b1c5360fe22ea203ee73b2a0a22152a872141c0533d9c80282fd08242fadbcd","size":714,"data":"","first_seen":"2025-06-22T10:42:51.78747Z","last_seen":"2026-06-05T15:12:51.797265Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/js/noti.js","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2550c8af4628f945c5d7c26d7c8ece6e","sha1":"4c3c1b3e218f84234ff83cb980cb9a7530c25cff","sha256":"3d2fa97168c01ff0e0c56b0f240e510d708c4897560e773ab831b75452718620","sha512":"2068e030ae8f2f55f7de3b5eded5abc33406f3bb4846f0ee44fae84a29be3abe65f66265ff0dc8b1939c6367f16a2a5dfcd0420bcb80d0f2eb003d5d332c17c6","ssdeep":"384:mozPmuIRyjo5exFb71SJ4exFboSzVqeTFzYS1heqH:lmN0j8uFbhSWuFboSQCFzYSz","tlshash":"ea52865420d61522457f727d9a935a6ef632d10b930b2ea13aac47d32ff6c24c6c371d","size":14199,"data":"","first_seen":"2026-01-22T14:55:18.010192Z","last_seen":"2026-04-14T13:37:51.683275Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf2d6add836b79af8754a438e13c9b0d","sha1":"39154d7a57dde0559a640098c246f87b6c1936c4","sha256":"fb763efdedad293cff0e2c2819b6a120996e5cfc9f482ef2d71a0fa4f125acc6","sha512":"b42ec4c430d2a112c0327b810d3417f26248bfed68deff49d3704a1179bc434bc2ceb846d1b8c3d71d1c237db1a2ff94764a2b919ef3f541fca41ee0cd941d10","ssdeep":"","tlshash":"493122adc1b1163501b3b16b13af996d293114a7b184c93d3eafdfc01fa5490a4a2eda","size":1584,"data":"","first_seen":"2025-06-23T06:39:13.041176Z","last_seen":"2026-04-14T13:37:51.795083Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c63dc6d6f1af93f9e76fb305c2249ae8","sha1":"1705e547ec2dd91c5257e7facdbdf387de151210","sha256":"54abdb9ed194620f66b746182e2db89dbeec1e5ffac06d99afcd4168eb5b6c5d","sha512":"282b78431dccb1c2ac8f372294439fe03bea9c5ba446c4f90292ba4b4ef88b4175a58350ea73b96bcf28540653c9f44fd2c5ddb887ae656bd48ac9a2ae4ab30e","ssdeep":"192:SnfBOxKyxdyxCyU4yuOxKyxdyxCyU4ylD2nQmVC:SVQm8","tlshash":"33e11168c6f9092d941b75fa4a9f4209a430a11b3d58aeed7d1db3109f8603de0f6f85","size":7233,"data":"","first_seen":"2025-06-23T06:39:13.045743Z","last_seen":"2026-04-14T13:37:51.798615Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/1/js/chart.js","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddb8b0991b8bb5d93eba1b0d2a64cffa","sha1":"31298e4d3433c99cb3cf44b72009f9bfa0342c0d","sha256":"0e2326c6868072bec1592760c6729043caeea2960a2b46cee6a2192aac6abff0","sha512":"6784496b7e8a97ce2e9e87afcf7c32674b850cc8fb95f6b102cfa18aa5d779971783fae37584da7c05f13ff84a4aa5bc5b0a37bf07e0d95fdd92e1f97ca3b66f","ssdeep":"6144:HycGOv7siC5tTzhSGmeab2OLK8rTleMR5LTDmNV0Fz42HRcXj2c:S8siC5pzhSGmeab2OLp9eMR5LTDm/0Ru","tlshash":"f214f5d53342b12282d256d6583a050ae3366648354789acf2bc5ddf3c6a98b71fff38","size":205222,"data":"","first_seen":"2023-08-25T08:23:08Z","last_seen":"2026-08-07T20:34:33.493594Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"egonswap.org/assets/img/coins/BNB.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/coins/BNB.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 2560\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SXqmWDfSXUQuNR1XGvifu%2BUYoS78WH%2F048jYwB3aYQql%2FNXK%2BYrMFalS7jBhhVwogthgzuTfkXHfzVBFE7Qlq%2BooY%2BH9OGKR2l6RQ%3D%3D\"}]}\r\ncf-ray: 9d6a53866ffe95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-06T05:29:05.061959Z","times_seen":1615,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/187648175b29e673.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/187648175b29e673.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9Of11N8wqyHet%2FXHwJxgAxN5tsQgxlugTeQlZjV2ZOP5k1W7bTj4E8YtdjzU9uQhwHaVQyY%2BTdWB1An5Do7LE0f7MNFwJSuYeaOMA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e3dd295bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5264,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5264), with no line terminators","md5":"2370f2d56ebb64cf356667148001cd04","sha1":"2334871fabb68b32a74ed8ec2d125003d604e92e","sha256":"da01886ad1e6aaef433715462f0eda34a29a84ad0e9f168e832f0f556d732800","sha512":"cced8437116be2cc42a0a6107ab8a8770b3090b7b3872080a9edaee7494494759b3adc0323696faa23b24fdd74c3855fcb2a66d0e5e766fac7e3c5191522de19","ssdeep":"96:ahThc6zLoI8tlZTOfVQ62IVwviU2F2W2s2A2h3asx3ZUaKWDR/gJ:ao/4RA+ic","tlshash":"7cb1cf8f5077c5dc7efa61695dcdaf4a31095c0b5d0baaa0cc72132af0b52b3312a697","first_seen":"2025-12-01T12:23:02.216731Z","last_seen":"2026-04-14T13:37:51.783953Z","times_seen":14,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/header/market-screener.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/header/market-screener.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4u84E0MLBz1fDBC%2FmMQrnqi3LdX%2BlaAkZOZzbh6E5TB%2Ba1oJR8mCi2jy0biOCM%2BRNlxGCqeycqFPG4Y0Mks2tVX6tmy3BFM3BUDsA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4ddb95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4647beae823e9a75e2c4861750e18675","sha1":"9d142ae7ff09a10fa320d108d1541b6ed858820e","sha256":"c5887b01d13ad5d4a98946e1d3e1114ac98c86272474930f39f96276fcdc4877","sha512":"8778642d57bcaf89ffc0790f709cdb8759fd45b37542027fd1c57a0f941454c39d249977340a6cf6e40a9919b3cae366f879a4e7098488080cad885c4da14f7f","ssdeep":"","tlshash":"b231bfd851dac9f8ea68c70416f89f95786238fb3250099cfebc652737824a5309ced6","first_seen":"2025-09-28T21:47:55.797492Z","last_seen":"2026-04-14T13:37:51.729456Z","times_seen":24,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/1.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/1.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 61458\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2Bpcv1jlZ7NzgQly3Bnnk%2F6o4LS4mZVWA4oCTQhmFV2oqiaP%2FZDvTeSwAC9cbO2r4wgcfHtrxsIz3BbBRs6Nr6n9R8IayyEI%2FKg6bg%3D%3D\"}]}\r\ncf-ray: 9d6a537e4de495bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61458,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 864x414, components 3","md5":"4c47bbaa5bd0589c40689d1cb98d8076","sha1":"e1933058545eed46177099460e4649a26d294a16","sha256":"a584d4d688a832a501c5908a4a344f85d2b8a969fb79f280551f342ce23f00ae","sha512":"0d24647d9e51a42cd98a8708d5d6a1a073ee74c736af9d2ea86ef4f4ca5215ec077a7a3b8177c93694f15146dc00eca3360b43738d0cea38dabf410ca3a710f3","ssdeep":"1536:36bhRwRcVVQfSlXswssMXZbVoPANtLAgPp1hQutuZ9Lk:ql4cr9/QX8PWpR3eYuZ9I","tlshash":"9953ad075c4c9f839548c3e43f124eacbf4a161d9d867aff60610dea3fa82920d9a51f","first_seen":"2025-12-01T12:23:02.225182Z","last_seen":"2026-04-14T13:37:51.771295Z","times_seen":14,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/6.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/6.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 134515\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFKaO%2Fa68ah%2BsMwbBNIGAyJCWUJAhsxJ1cJmIrZuiYLZtiIBetJAv4HY1cY7vjmhZCo65ZuLoi9tHOdfln5ZjBdyGHzHinT6N3Xoiw%3D%3D\"}]}\r\ncf-ray: 9d6a537e5dec95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134515,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"PNG image data, 864 x 414, 8-bit/color RGBA, non-interlaced","md5":"887df6dbdb33052b9604b5616eeddfd1","sha1":"a00b5ac71a777f8f51d8a08f721f63083e5fea04","sha256":"8925da897cf877abb090a6d313e0e34d46e2938b0ee84086c98237409d50a5e2","sha512":"124a8484a3801875697c4993014d3366bedb66fe5426440ee1e8d8540ac37b5efe99f83e47cff834e5040eafcd0d67932d8b2ebd43ea22c2194fe106ce2c40e7","ssdeep":"3072:chBGHivdR9kAH2hOLM4/GTFIZgDZvp3U1yLSjyMcze62vYcpUr:c3GCvz9kbIBeJIZg3Upyb8vRi","tlshash":"bed3025ee075c82c4ca092df6b140eb4a3b5c703d052963ee96d6428acc47718fd9c2f","first_seen":"2025-12-01T12:23:02.247916Z","last_seen":"2026-04-14T13:37:51.694409Z","times_seen":14,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/9.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/9.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 135808\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQlhv4E3QiV9VwE3avaJA9CUzKH4xVutfkJyhXWupSCDC1Ho2zHXj1DDA49C44oCR5e%2FAGptwfthE7icz%2F0fz4Mt3OcGN6%2BSyHPaSA%3D%3D\"}]}\r\ncf-ray: 9d6a537e6df295bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135808,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 864x414, components 3","md5":"32451b8c6ab91a6daf4ccfec164b7bb6","sha1":"30ee384453567c5dfcf644c74b66cfc57037b093","sha256":"9093058f020286f96329a9a2a23a8fd3db37e50d5abd6a3fb0be7b7d785eeb53","sha512":"c272dbb70e6492a21aa1b280dabf9f322d47df1d915335b1f528e708dafab91d9f35eeac1f662f004e25723cdfa63b235d26dbe63325faeaa37ced7015002e20","ssdeep":"3072:iAuD2DRwkUfV6PQkgYi0fpJWzK3kLgA2taftlL:iAuDGyffV64kW0xQzxLgZ0f7","tlshash":"35d3f0b8f7d3db2a8b4f408c51bd3d73175920fa22d52523640b6e2192a9f39c46b63c","first_seen":"2025-12-01T12:23:02.207416Z","last_seen":"2026-04-14T13:37:51.742617Z","times_seen":14,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.static-global.com/xt/xt-ssr-web-index/_next/static/media/XTFont-Regular.40174546.woff2","fqdn":"a.static-global.com","domain":"static-global.com","tld":"com"},"ip":{"addr":"3.173.161.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static-global.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 10 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:4F:96:9A:EE:4B:F3:8F:34:FE:12:3D:ED:9A:93:50:95:6E:05:C6","sha256":"9E:44:25:BA:05:DB:78:AD:29:ED:29:63:1E:DD:A1:E8:B9:CB:F5:A1:54:0E:68:40:7E:C4:7D:E4:75:A6:16:C0"}}},"request":{"raw":"GET /xt/xt-ssr-web-index/_next/static/media/XTFont-Regular.40174546.woff2 HTTP/1.1\r\nHost: a.static-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 21864\r\ndate: Tue, 03 Mar 2026 10:43:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Mon, 02 Mar 2026 09:37:29 GMT\r\netag: \"cd556d55dc5be13a0afaf236ed4d83b0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: vRHPYJPtw0DUif5jFwFhJtmDWg_0OQt8\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e70b5396a94f70fe0478eaebad6b4d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: 4loqgavUZrKPz-l3J9KjxeZnr91dt5AeMu34hFlIFXHJ5GQxnGQ2bg==\r\nage: 23974\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21864,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 21864, version 2.26214","md5":"cd556d55dc5be13a0afaf236ed4d83b0","sha1":"03e6e4b910380d4b9ce5b09c6804639202225606","sha256":"bc8b9238f53fec3fb6ae02a662322ae060648fc32fee694592a134d8a1756608","sha512":"7f3bd7bd48536db6964b2fa6ba1c4dd13bc44bc26312ab83f99fd7eb5c6b484013d0729e4f37649e48ac13a716d5a1850484be884f4f25cc89189cbe7d814259","ssdeep":"384:3nW0vsagMqamWYiv22YctL3agf1bLpD6wPAcOyc/mzUWhgpE1wtiBEGIR4UdcXkc:G0UakW5NN3RfVL5TAc6uHjZaG+4UaXkc","tlshash":"b0a2f12bc7f30ec98d0650321b4139a15b06c54e13dc39f9296c85aa71b3922ce8b8bf","first_seen":"2025-12-01T12:23:02.211813Z","last_seen":"2026-04-14T13:37:51.676785Z","times_seen":14,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":262,"dns":57,"connect":16,"send":0,"wait":36,"receive":1,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 115953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-07T20:24:14.77687Z","times_seen":256710,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":130,"dns":3,"connect":8,"send":0,"wait":8,"receive":7,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T17:22:55.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nset-cookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; Path=/; HttpOnly\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BO43%2FNDc9j6WYWRkzj%2BLakOscYA1b4glqQvFziN1vZ8qHLxgovlSFshGksc5m2TsXSaAoaHK2Jz0MCef%2FXxB99y1UpKxdtTko0NvPQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d6a537c28724651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172466,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5917)","md5":"6817daae065d2cba97d8898a157b00cf","sha1":"18fdeb771230a9d8ef1bd2486b0220af5969af1b","sha256":"59423a4bad3878966c1e941ddbab7d3eb2889719eae622bf8d4cb647ca9b5e86","sha512":"e6e313a9be2ab1072fa9d2f7e15acfe9eb7b5c3c307e7766271359efe2179a9b93b4414036ed049129dd4149f3853d47223c8f1602ac4d3c234b68bfeb7e3470","ssdeep":"1536:AkJxqZJ4449uy38BJPhBKWnFBfUolhPPHJBBiUeLZ49Q600Co6zzcrUSbFeCGhvi:9JDuy38BlhBKGFBfRhHPBg3SRfGhvXSF","tlshash":"d7f3b57051f12552404383a9bbb79b1b2b62d003eb0eda5876fc6ad48fc6dc5cd83a5e","first_seen":"2026-03-03T17:23:28.542996Z","last_seen":"2026-03-03T17:23:28.542996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":57,"dns":28,"connect":8,"send":0,"wait":126,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/support-logo-chat.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/support-logo-chat.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbsRzqayFNoJ5ufPyZkbTF%2FY4b8Q7TAtzzv%2B86L6Je0KgsBR1QmZYa7CqRVZGMvUtE4v%2BgeZJwCyYaIfxupGcWnaWNg22mhj%2F3EIvA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4de195bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b4255705cd455b620e93dc2262a4bfcc","sha1":"6b1a814a8a9d1ce7be885d3c47e8d91468a9cae2","sha256":"6e50a5880736a003a7c517874527fb1370fc51870ac8e06ff5d61d63adc92f93","sha512":"d0f0b8ea71fa52fa57ea16f35589bb9ece1bed7ce62f46712b9225c1bbe380ff04d25c3383329c9c6ab3f91739fd70dc3b6c69b8d8eab062094ca8c306eb19fa","ssdeep":"","tlshash":"ab3102f9f7edb5d4f9188790539a56b07b5b21fa7623c50807921ea0f24262e04a988d","first_seen":"2025-06-23T06:39:13.036817Z","last_seen":"2026-08-01T18:09:33.168909Z","times_seen":80,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/7.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/7.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 182002\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQlqwvX3VJXnItjJ4jeOFHucwgz1NFUsgtvjXsiFceVJqlIiWXd7qqkMOaStahLTFr0Z8v%2BoVRftZsqkVyqomcABrsuYaKJDVxJO4g%3D%3D\"}]}\r\ncf-ray: 9d6a537e5deb95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182002,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"PNG image data, 864 x 414, 8-bit/color RGBA, non-interlaced","md5":"ad379f8e9ad61f5c3e57eb68d5a1d127","sha1":"e5291e1aa9c5df073313c11989e6dce2ba381ab4","sha256":"47b25f30b1cbbbc979b06fd0ca3668df5ac16b4316389a9bac597c87c90024bb","sha512":"40891a8f3d0e058b5b1c18b483a2bea6341df0601e9541718846fb70cb881ae76ced377919c51e45645a979d62da13b4828e87363555b53c742b5a10d166a4e6","ssdeep":"3072:AeIqkkRVmin/rAusuIJ80toRhLRSeL7NRlcy3VrEPpu5PNQROveEeB/1JfSAmsiy:AepHRHc0IJuRhIePNbcy3ZPliROGpBbt","tlshash":"c104122c0bf7d68db5e989e72cd0cf18ee06079f67d92c8c6082715d21a9e7dc91e486","first_seen":"2025-12-01T12:23:02.245962Z","last_seen":"2026-04-14T13:37:51.704732Z","times_seen":14,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.static-global.com/xt/xt-ssr-web-index/_next/static/media/XTFont-DigitsSymbols.d3a22354.woff2","fqdn":"a.static-global.com","domain":"static-global.com","tld":"com"},"ip":{"addr":"3.173.161.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static-global.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 10 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:4F:96:9A:EE:4B:F3:8F:34:FE:12:3D:ED:9A:93:50:95:6E:05:C6","sha256":"9E:44:25:BA:05:DB:78:AD:29:ED:29:63:1E:DD:A1:E8:B9:CB:F5:A1:54:0E:68:40:7E:C4:7D:E4:75:A6:16:C0"}}},"request":{"raw":"GET /xt/xt-ssr-web-index/_next/static/media/XTFont-DigitsSymbols.d3a22354.woff2 HTTP/1.1\r\nHost: a.static-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 101356\r\ndate: Tue, 03 Mar 2026 10:43:26 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Mon, 02 Mar 2026 09:37:29 GMT\r\netag: \"be2e2f2d0eef740424eead1425d2b541\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ew2EdBSoQfRuLO9iDyND4SM85ZTibVUL\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e70b5396a94f70fe0478eaebad6b4d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: bM9YA4wP_pKTWPsKgFNDM_XQDeVOpST_fBIdE4U_f2xYguccOI4r-Q==\r\nage: 23972\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":101356,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 101356, version 3.13107","md5":"be2e2f2d0eef740424eead1425d2b541","sha1":"1cd112c2be08dbdb739fcdeaf22c49a47fc9bf33","sha256":"7bdd4022194f5aaec129f19514491a752af077a99a15ea90cefb23353bd5e83c","sha512":"28d166edbd986b9eaa7bb91a2170769332a6e13326dc50bbf9093383f2614cc39ef8dec9de2070e2c7ff53df353a46dd9ec71ea6ba172871a2227332eebcfd70","ssdeep":"1536:S0wqu9cR3o2aRfoT24gS+DLhGAXCFhphN1oIWZEBnITGjpJ/C/iZCzHo2AJJhP4w:VNuq15T24gSgGfFLITGd7J260jk","tlshash":"6da30270e6eef06f809263dd23fe641f9a0e1f193211f666ad8514769cf8b6d488871c","first_seen":"2025-12-01T12:23:02.166822Z","last_seen":"2026-04-14T13:37:51.678322Z","times_seen":14,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":397,"dns":48,"connect":21,"send":0,"wait":20,"receive":10,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/037b02ead5c7a4b1.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/037b02ead5c7a4b1.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQmpq5p7fidFJcgs6i3FZU7qw83Ircl8h9Uh6YvjwENxL9ico6TlTfgG2kxwpC7RUKnL06LjCTtWjTZFUFLQDyRmwXGFh22yQz%2F2%2FQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e2dcd95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1685,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1685), with no line terminators","md5":"55eeeefc89b4a7de6d07b0fb04fffedb","sha1":"aab121afe6b325cb161a8633248971af1e5803f4","sha256":"f2ed6df459e6f287f0c248faf3aaa6af168419431d483a9c17db929c1328b787","sha512":"e69500002fae3f893c231bedc5eb258e1fec002cb2a410f7c6f74f4f802323db1e5b374b847c12f17e3f91926fd4f454eb462abd1043b3540b207ed0fc969e95","ssdeep":"","tlshash":"163146307788a6729c176b8a64c0025cbe3c6d11432326a456f77a6dc39b0ef533ed9d","first_seen":"2025-12-01T12:23:02.243409Z","last_seen":"2026-04-14T13:37:51.724379Z","times_seen":14,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/js/toastr.js","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDhSBfaZewrPr%2BVvMPVCtOgxcbzvCHM%2Bpv76BqzOBK3zi7jMldN7DrufxBGv%2FnODSsGyeMJ6q%2BR7FIVC0TBLM%2FnZhyuiBiTYUli2Fg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537efe1895bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-06T22:46:35.600971Z","times_seen":970,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.static-global.com/xt/xt-ssr-web-index/_next/static/media/XTFont-DigitsSymbols.d3a22354.woff2","fqdn":"a.static-global.com","domain":"static-global.com","tld":"com"},"ip":{"addr":"3.173.161.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static-global.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 10 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:4F:96:9A:EE:4B:F3:8F:34:FE:12:3D:ED:9A:93:50:95:6E:05:C6","sha256":"9E:44:25:BA:05:DB:78:AD:29:ED:29:63:1E:DD:A1:E8:B9:CB:F5:A1:54:0E:68:40:7E:C4:7D:E4:75:A6:16:C0"}}},"request":{"raw":"GET /xt/xt-ssr-web-index/_next/static/media/XTFont-DigitsSymbols.d3a22354.woff2 HTTP/1.1\r\nHost: a.static-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 101356\r\ndate: Tue, 03 Mar 2026 10:43:26 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Mon, 02 Mar 2026 09:37:29 GMT\r\netag: \"be2e2f2d0eef740424eead1425d2b541\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ew2EdBSoQfRuLO9iDyND4SM85ZTibVUL\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e70b5396a94f70fe0478eaebad6b4d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: 4iRCLJTnCbPKB1ITfHZ5v87vDZVBtaUuuDsYWzvH62nYgFz5D_kp2A==\r\nage: 23972\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":101356,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 101356, version 3.13107","md5":"be2e2f2d0eef740424eead1425d2b541","sha1":"1cd112c2be08dbdb739fcdeaf22c49a47fc9bf33","sha256":"7bdd4022194f5aaec129f19514491a752af077a99a15ea90cefb23353bd5e83c","sha512":"28d166edbd986b9eaa7bb91a2170769332a6e13326dc50bbf9093383f2614cc39ef8dec9de2070e2c7ff53df353a46dd9ec71ea6ba172871a2227332eebcfd70","ssdeep":"1536:S0wqu9cR3o2aRfoT24gS+DLhGAXCFhphN1oIWZEBnITGjpJ/C/iZCzHo2AJJhP4w:VNuq15T24gSgGfFLITGd7J260jk","tlshash":"6da30270e6eef06f809263dd23fe641f9a0e1f193211f666ad8514769cf8b6d488871c","first_seen":"2025-12-01T12:23:02.166822Z","last_seen":"2026-04-14T13:37:51.678322Z","times_seen":14,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/coins/XRP.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/coins/XRP.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 953\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJVmE16jaDOT%2B2BdSOqepq4ajnqYcUvJc1%2FWMu3Sz60%2B1r0lopwcd%2Fg8wbghQXo8H4FL5i7VBDldR23oqK3j%2BQTpWi%2FeRjT5JqCcBg%3D%3D\"}]}\r\ncf-ray: 9d6a5386981195bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-02T14:27:27.479533Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/9ac76eaae1345561.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/9ac76eaae1345561.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZXmRK5ttjz3tk6xYGsfUY1Ia4u3Gizkhm%2FLKD4rnvCMC7DvAIzhWwZdv0RQ3DoKs3K0X%2BU%2BDxOD9dWpdxDUiAsoqXtOJkcjQBFIuw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e3dd495bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2277,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2277), with no line terminators","md5":"41e7690da84e4555d2a4c1ff1abbb460","sha1":"556dfb9526e01adc7e585cf6f9febac650cfd744","sha256":"22e64946597e84f11c60db119479b53c1ec7640157d268e5db5362736b12721e","sha512":"c8a021417c2dc4b7fe790d365cb7af98dfb43fab70f4edd68a59371d7816157e511d9ec11ccccbfe2b2554c4018d21baf53f6d74a3ef6888413f52d0dead4a9d","ssdeep":"","tlshash":"c141232b175c677ef112631ae1b23089739d840a1b6fd6f0cf95a4ce92737630722653","first_seen":"2025-12-01T12:23:02.271689Z","last_seen":"2026-04-14T13:37:51.719096Z","times_seen":14,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/header/technical-analysis.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/header/technical-analysis.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4eZ1jOaRYXBT3JQUqHqxpkSuJAxp32yivZaHSykWfpXhQiGmVQhogAkrIR87kgbHEfHdRxYkoFuYx1bHh1WklEy2Nd6ZJCk8XoV8dg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4ddf95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"34e8a6de3e1d6840df12e75c6027185d","sha1":"92a31bc5bda11c09bfa08f45a583a88bc9fd7079","sha256":"bb0ab7c420c691bbcb5413b3c4f3a147b1413960add712fcebf27e5511708309","sha512":"a0fd8a5229f4c00e812a419d3425cee13c0a851f18f271f48754beb0003d72fc01036bdc332ce16f0f9b8862d25e38e22c5bf61427b3ea235e5197d620c7c40d","ssdeep":"96:+kUAfxrpn/3lg7arcU7pV7M3qIkLm2KGhZmnJRYUDDVod96:3Ugxr1qOoqNKGMBDhoH6","tlshash":"01a1738b033cc3f87bd86428a8713642367254bf5678a108f3bfb8263747f662255d58","first_seen":"2025-09-28T21:47:55.780102Z","last_seen":"2026-04-14T13:37:51.731259Z","times_seen":24,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/chat.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/chat.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzrK781yYctrJ%2FW5x5bh8sqMrdOkVOvCFe%2B8ZXc8MnAZckLZP%2FIwpoReUlY0lRB3dm5uVUONt7zmEN6fpqWTlWQxZnLOFuqWnvCsmg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4de095bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"856a385d230e560529fe4f70a442cea9","sha1":"c9669d3c47705149e26efd24e0d3ed738fc03069","sha256":"c2b05ce3c22fd9b07bc627c2ace70217eb0e3dc2183d9d4aa58bd482dcd8d7d5","sha512":"10308be3d10aa5ea28b1c8a026b6008c530aea11658680ca9b54af0e06e4f7e7d7b1831326d13cc915f83bbc4d1e8b5e67e630a42b8bb898c713875ee3fb2959","ssdeep":"","tlshash":"fd2168e66fec96a6d35e833063f41fa62b4730bdb6408d5f8680dfb0db051aa4144ad8","first_seen":"2025-02-15T17:58:10.491189Z","last_seen":"2026-08-01T13:57:27.109426Z","times_seen":518,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/f477cb69-62f0-48f1-8f6b-87d767bcb15d-1735230841717.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/f477cb69-62f0-48f1-8f6b-87d767bcb15d-1735230841717.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 533282\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3mckP1S4i4gMLWNdbNXYKjUcl%2BzxRDJfemgcg3E1K%2BlkEhPi0K2NIlScifthS%2FBlTDfzOfvVBFh6lPT5jEWYMrMYyq6Hfs9uFPS1Q%3D%3D\"}]}\r\ncf-ray: 9d6a537efe1395bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533282,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 510 x 512, 8-bit/color RGBA, non-interlaced","md5":"2a3aaf77f86d9d0604d79c114b9c690e","sha1":"5bd67792525a882dd9b9c6c67222d0518604c90f","sha256":"7e02dc4ba9fa2270a07fdeb9b06df671dbd06a1a8c125371101b2e09697c00aa","sha512":"645e899cff09a154d757c98226173f2482a1178246c099bd76b4f7f5571abc8704018fe2d0f41065302117b71d19273a54ec4ddb8f0e5aef3a3edf437daffd5f","ssdeep":"12288:NoTB0+WZnK7VGF14hLrI3OwhqDGw0PFk4tGAG2MBdGtD3fsbV:NoN09nK7VjLrIXqDGwcrMBc13f6V","tlshash":"acb42362f6dca13cad5d02e34bd06a2e1d29d6ac144c6f4a2bedcbb5dd026c0667e50c","first_seen":"2025-12-01T12:23:02.226809Z","last_seen":"2026-04-14T13:37:51.776457Z","times_seen":14,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":274,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/coins/BTC.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/coins/BTC.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 1125\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lADoaj4k60z6pZws1amKBgS83HDlM7XifrCh2V9NYpVZF23pAAO8IgMtNsqttKlYeZYRPokJ8bVeFE%2B2ARlgIm1TYy5pc4pwPtERZQ%3D%3D\"}]}\r\ncf-ray: 9d6a5384af7395bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-06T05:29:05.070506Z","times_seen":1841,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1458\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: cba9b52a-604e-4acc-9be9-f94721b788f9\r\nx-mbx-used-weight: 11\r\nx-mbx-used-weight-1m: 11\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: rlMZkk8EP_QFRg25vGIv59GSV8VaV2A_CJ1b4cZrcuiXYNmr-W8_Rg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4314,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a2f65dc6a1091f79e5a80f0a831eab72","sha1":"11b9bf4606b8c5bc26ab4747cfeda0444e4222f5","sha256":"a74f2dbac2fec50d5b62e145aca7e9e62c382523e9894f683122a92767e84f67","sha512":"b02194ec4491e72ea22cbba8519cc8144cb9c13d50f2a4092e08316b9bececa0e3d3b02b544d605eade5f274c0f0a37ea240474aa22af981b56f78dc8352a94c","ssdeep":"96:RmzC3cKcLvqWRCvxvoZX44kglISy39hbQQTBH:Rme3XcLSWRCadHISy3AIBH","tlshash":"4491bba917b4d6b0fd35494d27d2bc962b6b309badcb0ed8c4d3362798f11725b08712","first_seen":"2026-03-03T17:23:28.562274Z","last_seen":"2026-03-03T17:23:28.562274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/3.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/3.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 99053\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HzC9W79lKwjbTr%2FTKlfM80ZTpxS7hiW7XWn6OjfAOypQfi1IMOGjnR3F%2BVNOes1AEjT1ZXVvITeg0UQVxs41ZK8QeQ5fsqOZ5ORSTg%3D%3D\"}]}\r\ncf-ray: 9d6a537e4de695bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99053,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"PNG image data, 864 x 414, 8-bit/color RGBA, non-interlaced","md5":"03e653f2d1eb1a77c8cd51b1538dfbd2","sha1":"587fa5b5b16bd9b7facf4143f9689c63eda77b2f","sha256":"d4ad83bab5047993445cc9e4c2db09ff24e1d6f7602d5084e065ddba0e7e58a1","sha512":"b95f31218fb5e35efa21fff99895be804056ae5c4e83b4aecd5323dc9a7597d2b60063e178e71c6b5f68d97c10dd5a79d5430158bdfbf4e96c354b07e8820fc2","ssdeep":"3072:p1JKZ+JA03Xdv6BncszgkLeFUqsk+xHN4+:rJKqnI6ygczq0xHC+","tlshash":"67a3021a2e33c7b70e6f43472364a9bac926156a46a1073673b1d14ec210f973cdf9e6","first_seen":"2025-12-01T12:23:02.174803Z","last_seen":"2026-04-14T13:37:51.721129Z","times_seen":14,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/5.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/5.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 186600\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=we9dmFe%2Bg1UfQQKoYI3Dgfuu6KVia%2FRYJMnwu0Cm97w9DXFOXKHqW790tpXUikWGC%2BKC4XWRDIdJxxofbKM2zrTan%2FnOM5WV3wiRXg%3D%3D\"}]}\r\ncf-ray: 9d6a537e4de895bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186600,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"PNG image data, 864 x 414, 8-bit/color RGBA, interlaced","md5":"d03e65406b0b87d29048d62218a03bda","sha1":"c6661826f66de57fe2d9f55af9b9b4208fb7fc14","sha256":"0587b9495493c0f7d61f7b89d0b67682b529addb0de4a9e53ee66fe525b16925","sha512":"d13d87be5534d4d0ae3a3bbce333a09bb57379447eae9bdf93213123c4b0d8dffd90d5c8adac3a36eb4fa8c2b25c2783622e728869fa4d5c5a101d5633a55f58","ssdeep":"3072:HqtuJfshSUy/u7pifehSU6oe8d/+YjiJhIXBMvwNtVm1xwvl1sXeesdhmMiAiEw:HqI0h7ym1gU6oeLYuJhYNtkw+ebhQAid","tlshash":"c90413ce15c3f070d9bfa6a2f4d7d7b1b29a51e7f3b0a70079d9c912a53d292a240c42","first_seen":"2025-12-01T12:23:02.251645Z","last_seen":"2026-04-14T13:37:51.788239Z","times_seen":14,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/lin/spot.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/lin/spot.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 60105\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2SID6Qx2MTKHGb3x%2Fr7sXSvM0NfxjK2JU3yUZXVAvQ87rT22F2TRMspLqS3z1W1mWvdZutOkc8MaBulP758lBiQRU8M9%2BCdG5thIw%3D%3D\"}]}\r\ncf-ray: 9d6a53842f5b95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60105,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 328 x 328, 8-bit/color RGBA, non-interlaced","md5":"0ebd1027e4bcb20588d50a79849e0471","sha1":"2fcfd9168e2f1fc432ed43c23be012c7cfa1407a","sha256":"07c85c26328d497e4385ecc16e2654d7cac53cb08bd227d4f2a658ab52430168","sha512":"9156e84d2b79a77e3a37bf9069c6d3ef542996cc4d0a599ed061d04d1b521fbc61344d5cc53df2134429c7521e1f2d4062d1e3973647beab82988338677f82e2","ssdeep":"1536:XLcAnbCLvH3ihYHEH2GxwCloeFQ8oI0Jjizv:7cAEPShYHC2GxwyzoI0Jj8v","tlshash":"a443f16e0353e31624adc79fcdd2197c909a3bfa2b9988090ded64508b20d9b76f51cf","first_seen":"2025-12-01T12:23:02.163312Z","last_seen":"2026-04-14T13:37:51.778752Z","times_seen":14,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/admin_icon_dir/1764013499894.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /admin_icon_dir/1764013499894.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 24 Nov 2025 19:44:59 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f6wmejnMaWTkU3rD116g91XlbO0ZeKa6MQMJqcd8zVEsfn5WYwCbNFisZFgvcbV2WC6pDuzZmQtYhgQNZ9%2B6vravU7qshNWCDm6lyQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 883692\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d6a538838d695bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"64d0bd71791d6ad02397f5132e040e77","sha1":"43f4b9e8739a4ebc7565ff238001e4fcdc0d642e","sha256":"e6f63e0cc620715b80902406afe73a3bb28c2fccc2d75edb869c6be89460f6dd","sha512":"80ca5ca39fefb7d58e62d30a488c425ef26bb44ab716f105e309410b182fe91dc7959030b9af868edb9c0eb7d4efd816a6bfb597e9ac041547db49e2cfeab691","ssdeep":"","tlshash":"0121cd7fc7185cb7f12b835de2e0901601a66149e6c8c7a5e7a4bb1f2411da31c297c8","first_seen":"2025-09-28T21:47:55.776457Z","last_seen":"2026-03-03T17:47:16.408675Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:58.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1256\r\ndate: Tue, 03 Mar 2026 17:22:58 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 78e84718-e4b8-453e-ac01-699738108e58\r\nx-mbx-used-weight: 15\r\nx-mbx-used-weight-1m: 15\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: KK9e3tHAk86ELYr0Hln7N0nDDcvhJWdjJJrGl_qQQ3aKPTBP86d9Ag==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4085,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f167059fe45d5b7442b8aec6058fa4a1","sha1":"25da956781b47ca20bb350250e3edcc952848762","sha256":"9e4e6105e0183dc80b1e688a6e9a540433e3cfed89af12f097e57ea3c4ea5f49","sha512":"33138db6368cfee66296e4ccfc562c2ae871fae8a281e18294edb812c7d2a0aaa2e4f5bfdecd5b44931a78b27763eff8aefe88d06912a24e82904203005b9048","ssdeep":"","tlshash":"7e81c05227f98260fa354d193792b8651e2b7c9abdcf1de888927e378cf2171570c711","first_seen":"2026-03-03T17:23:28.571923Z","last_seen":"2026-03-03T17:23:28.571923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nage: 770737\r\nx-served-by: cache-lga21978-LGA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 78914\r\nx-timer: S1772558576.417207,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-07T20:24:24.921133Z","times_seen":184427,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":19,"dns":2,"connect":18,"send":0,"wait":14,"receive":6,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/10.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/10.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 45128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgKNKsCP2UCJr6gh7LexCxwSYL4LY%2F7k2MiiUPHKmxj3xUz0odcnNEiYyCZQYrByKQIWKM3h3Z4P%2BlEC1UUNkTIaF7rlfHPTRsDkzQ%3D%3D\"}]}\r\ncf-ray: 9d6a537e6df395bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45128,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 864x414, components 3","md5":"f64d4283e7493f6bc423c04fde6534ad","sha1":"723c1a925fc16a5382e5201298867c71f7a9f5d0","sha256":"3fd015868f0d02e25cb4f4e21935c47654b4255823e1872a5fbc7722ba2dd5c6","sha512":"d7c6ef0c6470bb18e83682e0a82b99e3b65082b4ef884791fffacd68ea627dc27c4e6b6996e70580aaa96e78e5ceb8b51efc0c577626d7a2d46a695800ede2ff","ssdeep":"768:3l5LRuw0ejDYv9/TmubOMVmt1nQAyZbG5IMcK17YTqZkMtA0O/QP3vRllgP:3Dz0UEouKMVmtJOZbG5kKaJMC+FY","tlshash":"51136c138c08df93e969c7e8bf134da85b4b1748a99236fe14215dcf2f5a5260cca47e","first_seen":"2025-12-01T12:23:02.233983Z","last_seen":"2026-04-14T13:37:51.706497Z","times_seen":14,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nage: 6050\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-07T20:21:37.926881Z","times_seen":26710,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":1,"dns":3,"connect":16,"send":0,"wait":14,"receive":16,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/63978bea-8002-4654-aecf-5432297e5b65-1755582612073.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/63978bea-8002-4654-aecf-5432297e5b65-1755582612073.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 111062\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EV1jZFMMbUgNm05IRaoipQbzmd%2B4hhD4jDlCHp2sd%2F2hhWlXDNS7Y2NeGvyq6fnbW1oZ2qK5UNPiux%2F3sXDmwI3zAiNEjGYyPn31EQ%3D%3D\"}]}\r\ncf-ray: 9d6a537ebe0495bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111062,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 397 x 397, 8-bit/color RGB, non-interlaced","md5":"ac4ce6220ac27ad505e37aacade31624","sha1":"f5ac30aba223d8ba0292a6c768dd7f90b3f08666","sha256":"4398ec8076bd03b4f300727b320fa6ba14c9e4df19771ddac30c9a526ceb3079","sha512":"a5e3ff2da572cf3df9295d4b6f97e1f31e17c5a7b56519def8525bf2dee7b61ff52c9e9935de5cd2e4ca59b72bbfd0ece525b06cf886aa74094326740892c54a","ssdeep":"1536:Fynuab+lzRnz14KANAuoI6ZoDTdQuzJQBsXGY1TKRcvsYumGcAA8/f9jGFvhzkD:FQDSp4KOr6GDTdD1Q7Y9mcvRLh81Kh4D","tlshash":"dab31222868e2649371c63f5f9f85c76c140da8c8d974912f31be793e8ce568de38b24","first_seen":"2025-12-01T12:23:02.264865Z","last_seen":"2026-04-14T13:37:51.73869Z","times_seen":14,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 42396\r\ncf-ray: 9d6a537e499eb1b8-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"658b77e4-a59c\"\r\nlast-modified: Wed, 27 Dec 2023 01:03:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1124259\r\nexpires: Sun, 21 Feb 2027 17:22:56 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kD1ai1xiGgFvmu9QE%2FeCTTiqAmTbTIdrzZtxsOS2aBrkxjO88YaeV6Z3BA3aZYXKiPjIWBsgBFZ%2BiZKSCohYhRIbascceWK00wJ7zVZi9w9zd5yptKABtys0p%2BELxRtTzZXn%2FOZx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346626,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c83c4bce691e18f82409f87b2bf84e4","sha1":"3958d951f073022975e50de0c711a17bfa1b703f","sha256":"03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962","sha512":"fe4eb9f06e94b02bdb906441def3d7a6c3c781679db89c225863c2192d78210c37c69afadc010c740f273181b68266245e2b50c434e7ea288aff67c3e13f3ba8","ssdeep":"3072:LRA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:LRAI64wN89BqZnODweSgH3n/hIB","tlshash":"b5742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2023-12-27T17:19:29Z","last_seen":"2026-08-07T17:58:29.745281Z","times_seen":6255,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":22,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\ncf-ray: 9d6a537e8b28767a-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659c9856-f8bd\"\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 335285\r\nexpires: Sun, 21 Feb 2027 17:22:56 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2R384XCxhlikAphVLo3dYqsKU98JQvopV7L5goo02EHZ%2FzVdWlQQfBivdHZo6aePBfXPm5Wjf9MG0DmXpa7U3RktNJ83btcS2It%2F2U1ZDtUkM0YX7t00Ykz%2FRj6AEigT4n9q2q38\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-07T13:44:15.768412Z","times_seen":2331,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":4,"dns":3,"connect":9,"send":0,"wait":21,"receive":9,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/admin_icon_dir/1764013499894.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /admin_icon_dir/1764013499894.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 24 Nov 2025 19:44:59 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSn437MjGDvnot0Y7eFmg4FEQJ9ACUlOFC14DsZKtYzf2JV1YkKylW8ISt8Lhtw%2BEawNz6BRmNTVP%2BGP7MnMoeWL2xDI2VohImLQFg%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 883692\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d6a538838d595bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"64d0bd71791d6ad02397f5132e040e77","sha1":"43f4b9e8739a4ebc7565ff238001e4fcdc0d642e","sha256":"e6f63e0cc620715b80902406afe73a3bb28c2fccc2d75edb869c6be89460f6dd","sha512":"80ca5ca39fefb7d58e62d30a488c425ef26bb44ab716f105e309410b182fe91dc7959030b9af868edb9c0eb7d4efd816a6bfb597e9ac041547db49e2cfeab691","ssdeep":"","tlshash":"0121cd7fc7185cb7f12b835de2e0901601a66149e6c8c7a5e7a4bb1f2411da31c297c8","first_seen":"2025-09-28T21:47:55.776457Z","last_seen":"2026-03-03T17:47:16.408675Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ADAUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:23:00.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ADAUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1176\r\ndate: Tue, 03 Mar 2026 17:23:00 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 20398630-d864-40d8-846d-9ea91776168a\r\nx-mbx-used-weight: 6\r\nx-mbx-used-weight-1m: 6\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: yzHBTJYZRJiDKT2LKf5DZawYuJT9H3pjBVWu5GRF-zUErYz27p_PDg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4000,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"92d368d612c9ee7843df4c8002888b6e","sha1":"f6e5cee4f3112db879634c7f7f50fb248e14f639","sha256":"f157b0a5bd3af0a83921ceb67b699bc6696fdebb145a433e2fe751fb9512f9ca","sha512":"f8055f3ec9664a6010117182268205301c53050c1adf63b598fcff4a81f6818e61010fc47759210b94b521a7c846fcaeb9992f56f5b2377881c5703663fa25cd","ssdeep":"","tlshash":"6381d1901694c650fa3e8c5d23a1f9961a2f705faecf0fd889d2673309e02f25758f15","first_seen":"2026-03-03T17:23:28.586709Z","last_seen":"2026-03-03T17:23:28.586709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/60eed8afc210eda8.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/60eed8afc210eda8.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vub3XaZFT%2FFDpqcn1tsp5hK94H0xcsJtW7HRQFfPWlqthUfGwDPORb4TZj4B9w%2Bdy745tdKoqqLKVDt4OmlbVBsClhdnsBpig0qaLg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e2dce95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13007,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (13007), with no line terminators","md5":"cdca67f275e1a90b42008db2f6cd34d4","sha1":"964c8a6251318fe29594f1263fbea2e373bc0a4e","sha256":"dcbb41de558594155b51d29e3a2f7cab20de65e0588d2b7febc6948a13019430","sha512":"80c2253a9521886caaa3e7476205f8f4faf35fbcfd7db887744749dff7d6a2478d8a6edef963f675c432d5275861eb7d35ef21ccae933fb32aab6f94668e9a9d","ssdeep":"96:NOherdOrkDCGxtSEAHxtE1RDLdc1OonHNLCWn/v0yCeL3vvZRPUExCEa1D91:NOhe5OEJx4Esx+3DZzutL0HeXI1","tlshash":"1c428a25d703386ff0e6d318b17bf9fe1541830b821f5af99761b0aa878124121e7e7a","first_seen":"2025-12-01T12:23:02.27016Z","last_seen":"2026-04-14T13:37:51.743865Z","times_seen":14,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/header/cross-rates.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/header/cross-rates.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrH56wgC3DaOgc3USaKNHg5Ej10RgShE4%2FKNsxkPJWMfvv9LeLIp6R0%2B0urIl%2BiWqK28fYqeNLvLAiilbEgPvCccfmWlWU6TUgcujw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4ddc95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"3d471a25ebb1a4a67730f822904cb2ca","sha1":"216cd4d19484824d84f45d309e9307af623f005e","sha256":"ab6888f7e51bdf1fe86457fb0bc17f21e7c95b8de53ffc2a1ef27206fb4a9bfd","sha512":"8bb945091b15e0e6f5d28b6cb8b0493366fd7e14994d4bd6571b8cc3c09a5b75d74068b9813fa7d4fdc2576dfd14f0f7ebb9c7838e700ae17e2f0b0d1520b6b3","ssdeep":"","tlshash":"0851ea43e378e674ba4cae5d71503a50667214bbfa30908887b61f6e1c037d7b284d35","first_seen":"2025-09-28T21:47:55.791657Z","last_seen":"2026-04-14T13:37:51.691642Z","times_seen":24,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/arrow-down.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/arrow-down.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ryyCny5F1eh9IW4atQmSq6Uu82Ep1nsrQfND6P91dqmqCcyvPceyhIP8mSj%2FbZzWeo5V3VW5Tyf0h0HGj9CKGfYC6cluxhgESdzvg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4de395bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"2a074025d4b53d35664617240917899a","sha1":"1eec68d8683724f83f094b7f7d86ca68227a9b6e","sha256":"83d776d2de5b24cad5cd3583b90df5bdbe4c622e2beefc62b544c82177e24fb4","sha512":"3f55dfedc7f76637f306ee45a61a894956bfb955407d01150c304ecb096b64757a8a4beea01e6887b59078afef6c352557de1b907639db2b9c9ac403a1aa1b64","ssdeep":"","tlshash":"8ad0979841d84c2ce3220a10d7383b68703e20b39f880148ed53713ea11a6cd2c339f8","first_seen":"2025-06-23T06:39:12.934701Z","last_seen":"2026-04-14T13:37:51.709141Z","times_seen":67,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/2.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/2.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 56485\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EniC717MASA9tUuRZen24WvYu4Qf6onXwH2rcjKss0aQdZfuXz667ZCXVJB7%2FywE0T6WXSe%2FZbBV24weN02R%2BxG0YZ6BH3e%2BDoNPtw%3D%3D\"}]}\r\ncf-ray: 9d6a537e4de595bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56485,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 864x414, components 3","md5":"08bcf840a35119ca6904819ede8efe11","sha1":"11d844c2a1fbd9a5ac3a489e6b9dd119fef3d80e","sha256":"11b9c2f24ba850601de7b05761a11662549edddb55e62a631f84d921f9effdae","sha512":"bf0e3fbe05754861210f2f3b5d000c00f93ffccd4703565a11e639f82434c2e183abac546ccc1f60e0ee246f6568d27fe8693d26e098605f32cc02b841710f44","ssdeep":"1536:3mKfpBneOJRu7UUhwuJXYkoSdxWNuPUV7B:2ypBneOO75hjJoAbWNiUv","tlshash":"da43cf6b89549f23f899c3b4ff938d592b0a1a1df98336f911220ed56f652b60c0907e","first_seen":"2025-12-01T12:23:02.259929Z","last_seen":"2026-04-14T13:37:51.76813Z","times_seen":14,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/js/noti.js","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/js/noti.js HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W45v5xiu3d6qubym%2BTtdkU0IVVWr96iA1D3JHu%2FRB4fGqLTVrwn11DY0cY2c9DN511SDWMvt4Ou4iGvsiW%2FBZhJNpBSlqv7jjT6DHA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537efe1995bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14199,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (344), with CRLF, LF line terminators","md5":"2550c8af4628f945c5d7c26d7c8ece6e","sha1":"4c3c1b3e218f84234ff83cb980cb9a7530c25cff","sha256":"3d2fa97168c01ff0e0c56b0f240e510d708c4897560e773ab831b75452718620","sha512":"2068e030ae8f2f55f7de3b5eded5abc33406f3bb4846f0ee44fae84a29be3abe65f66265ff0dc8b1939c6367f16a2a5dfcd0420bcb80d0f2eb003d5d332c17c6","ssdeep":"384:mozPmuIRyjo5exFb71SJ4exFboSzVqeTFzYS1heqH:lmN0j8uFbhSWuFboSQCFzYSz","tlshash":"ea52865420d61522457f727d9a935a6ef632d10b930b2ea13aac47d32ff6c24c6c371d","first_seen":"2026-01-22T14:55:18.010192Z","last_seen":"2026-04-14T13:37:51.683275Z","times_seen":19,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 03 Mar 2026 17:22:56 GMT\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a763918f3b1cf01f5127eaaaa4e5ed36","sha1":"e5932e684c5249dece73f827719829b05315deda","sha256":"316e33bfe6ab63fbb1920bfcf23774c4a779aa22c0707c7831064f9a1bb87c43","sha512":"adeeb53b0a7524e78f035b88e7993fee8484360c90ce3e6d3d69536ebf2aea3dc5d1cd45a94f0dbf8ce9ed4989351a1258ae07663871bd407bd3baa6b33d7f0e","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVK7:Xxyllff","tlshash":"04e210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:46:21.252973Z","last_seen":"2026-08-07T15:51:57.937064Z","times_seen":2697,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":293,"dns":1,"connect":11,"send":0,"wait":21,"receive":0,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/f91a352f9e6a1cca.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/f91a352f9e6a1cca.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KM%2FekwabEvVV2DahTgZjgZuLvGWjD%2F74ZUdgcImYxKwgiE7WW3p%2FzlbGmbWMMFjyE03ZuL%2BW06Nr9WXaFPLNbQwJlu%2BawWgBCEoQuQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e2dcc95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35657,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (35657), with no line terminators","md5":"367a251000b77d737d17f36cc3bcc376","sha1":"2be3f8122c0374d0657f5d9b833a63de1825793a","sha256":"3176d1b8489cfaddabdc3d28f38beab86b94546fb2be9cdf9a5a357e869304cb","sha512":"d8f60a8ac61e4e2d34affb5204afbacd5781b1a4669ca2b0c057a0f109fab458af6ca21bc8318ddfec0456094f0126474887127358876f05c79ba485b2f622ec","ssdeep":"192:uEuY8P/CTnITu2SCjtcbwUZZe9ocACsfP0ng5S49+ohhBAWsfsvPjVEIns51YrDN:8P/Tu2CL0N4PbVBW4B","tlshash":"a7f297363a30a63de4e3e924f587e5c961bad403de175fb9f80a231c82e71820a77755","first_seen":"2025-12-01T12:23:02.160587Z","last_seen":"2026-04-14T13:37:51.688293Z","times_seen":14,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/c51f8036a4287159.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/c51f8036a4287159.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYDbf0QQK%2Fpa9stg%2FuyZxiqgBQb5z08yeetnwsP8Cwcr8ylF1ChuXwCL1Hd1hx6oQ6a3MryS%2BQ%2FJeEhiq%2FqINDYLvEefJCbCDSQtIg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e3dd795bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5726,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5726), with no line terminators","md5":"0e4f3d579481d4b93afb464d0a6c67fd","sha1":"331ea9da74a46e7d94cc3fd83837406529505d05","sha256":"cd51968e7ac1f596cbb453706472958540f43230d920bf22a67ee03f09d8b822","sha512":"540bd72e653604cff502e39195029564bbfd497ac3c2871f13771465346cbb4ecb93534b00fe2028ffd223e5cfde20049ada89de37788c0003448097f92d1f0a","ssdeep":"96:PB5mSJ+MbpDAKneQYXtTqiybafQrh5Z+SCf:3mUJbiKneNTIbzZ+SCf","tlshash":"53c1933063116c6371274fad0e58e6f95da484239a77451ce7812f28ebf98f9025e7d2","first_seen":"2025-12-01T12:23:02.236013Z","last_seen":"2026-04-14T13:37:51.689787Z","times_seen":14,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/fonts/inter/Inter-Regular.ttf","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.ttf HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/assets/css/root.css\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: font/ttf;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vn8JG4A0dUOJRv1QCRqdjNdww3CSxwQlVF%2BAaymIu3JkvlmRXktMQpzickeCF0v7HOqZUcZhTyhfNv%2BrgpR8IhGeKbMXXkP9M6yWbw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a53832f0f95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-08-07T20:09:01.187227Z","times_seen":4414,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:58.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1391\r\ndate: Tue, 03 Mar 2026 17:22:58 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: e366d532-cb3a-40e4-a45f-93113e0e6be0\r\nx-mbx-used-weight: 13\r\nx-mbx-used-weight-1m: 13\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -HFkfsUYFoeaDNxn0gm-U6UxaPQvN4L7-yM3lM2x90Bq2IhR0lq_jA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4279,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6c4d40030b13574b5c4e2c3b6fd305a6","sha1":"3a86da3fe3a62a560dc437c8b3665867c2ae4099","sha256":"cb2bbb83fade889613d9331831d16cb757ad02717a6b17c293e85ec95cc2aad1","sha512":"70d42a9fcc92ada89f044203969a3bade39304247ff4a218b04c32c08dd2a8a14cc85ed5f71249e708dab429267e35c67f16bd6f9fcb4e24c307d9d5f93dcb55","ssdeep":"96:Pic7D2YY0+nQduu1rqAlA2vJmij1Swoy2FSq:PiODhaQduqG+A2vJmij4j","tlshash":"4b913b51138487b0fa3949992ba6b8d17e773097addf0ed895d33b7708f50b19718360","first_seen":"2026-03-03T17:23:28.60896Z","last_seen":"2026-03-03T17:23:28.60896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.okx.com/cdn/assets/files/243/79620084DA93114F.webm","fqdn":"www.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"104.18.43.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 01:29:42 GMT","end":"Sat, 16 May 2026 02:29:39 GMT"},"fingerprint":{"sha1":"08:1E:6A:A5:48:C5:FE:15:91:71:F3:91:F2:62:64:F6:3D:85:71:53","sha256":"BA:1D:5E:3E:03:94:6A:29:2F:55:A4:89:AD:87:C6:47:B3:C7:8D:09:0E:7C:0B:C9:E0:8E:CF:92:8C:1C:E5:DE"}}},"request":{"raw":"GET /cdn/assets/files/243/79620084DA93114F.webm HTTP/1.1\r\nHost: www.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-type: video/webm\r\ncontent-length: 481841\r\nserver: cloudflare\r\nx-oss-request-id: 696721E71F19783134968847\r\nx-oss-cdn-auth: success\r\nset-cookie: __cf_bm=uV69j70mkqP1IHFgeflgFN0fzcvAxZO69nVXLLUxu_E-1772558577.202341-1.0.1.1-ARN5OvONCP_E04V_kaORHCH2cNlZYx22NRtgxV5NnLmRG.z6sZJeZ.oLqbNsDVGvCV0MY5phP8AN6lG3YvJKwrenuCyabc3IqSvws5_hP090hWndRjron3NwRbJA8.s0; HttpOnly; Secure; Path=/; Domain=okx.com; Expires=Tue, 03 Mar 2026 17:52:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT\r\naccess-control-expose-headers: etag, x-oss-request-id\r\naccess-control-max-age: 3600\r\ncontent-md5: khIgwXliAITakxFPXYkVpg==\r\nx-oss-server-time: 4\r\nvia: ens-cache37.l2de4[737,739,304-0,H], ens-cache6.l2de4[741,0], ens-cache21.de5[743,756,200-0,H], ens-cache15.de5[758,0]\r\netag: \"921220C179620084DA93114F5D8915A6\"\r\nlast-modified: Tue, 19 Mar 2024 09:52:08 GMT\r\nx-oss-hash-crc64ecma: 10068401746909578118\r\nexpires: Wed, 03 Mar 2027 17:22:57 GMT\r\nali-swift-global-savetime: 1768366567\r\nx-cache: HIT TCP_REFRESH_HIT dirn:4:1234830467\r\nx-swift-savetime: Wed, 14 Jan 2026 04:56:08 GMT\r\nx-swift-cachetime: 3600\r\ncache-control: public, max-age=31536000\r\ntiming-allow-origin: *\r\neagleid: a3b55ca317683665672933895e\r\ncontent-range: bytes 0-481840/481841\r\ncf-cache-status: HIT\r\ncf-ray: 9d6a53838990c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":481841,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"921220c179620084da93114f5d8915a6","sha1":"cdb4039a990e9499445c2799570792258403abca","sha256":"62eccf26f1556e703c2abb673cbedfee794345071e9135a1c1de7a79b904ca34","sha512":"1300fbfe354921f63db9ce0c2f1d569818429f9a81efcabdc49a1442335f3f52c5c7b1485a514a7d084c4fc71b3d44e9ef64207d9a3470f036f7b6ea68ec1f38","ssdeep":"12288:8PPx7YNzLLCgt6LLVAbwiAS+/BDNEYsPCKSQg:Kx+LCSyZaA1/BLsqf","tlshash":"69a4235b84b8af81f72a13f7c353a0e51a1e9e2d7c213b19d2d05917cde520ab82e717","first_seen":"2025-03-27T12:45:47.353108Z","last_seen":"2026-07-27T14:59:58.492342Z","times_seen":168,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":256,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/coins/ETH.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/coins/ETH.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 1100\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDZyYhmTYpHMMyOk40jSilx75v1RH0onjqQRuUzweUbfk8EkYhixHQn3CMD6zhExPLvKAwqEm3grahsRvDuZHAXCuZy9E1N0CACamw%3D%3D\"}]}\r\ncf-ray: 9d6a5385afba95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-06T05:29:05.065942Z","times_seen":1859,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:58.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1263\r\ndate: Tue, 03 Mar 2026 17:22:59 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 78e84718-e4b8-453e-ac01-699738108e58\r\nx-mbx-used-weight: 17\r\nx-mbx-used-weight-1m: 17\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Er1EhmDJ3BiJam4bYTUAM6NDLGkH1uhxtfJ4jfgm6QEWWM8fAX8-Og==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4085,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7a16afcb88717b0fac156c3977738bb8","sha1":"88d78cdc4e6c711c798e8197f4feae8086eb05d4","sha256":"66521f20ae3cf8a829d59f24a82bf349ce7761799e9c9a07a812d23246daaca6","sha512":"a8712d4026d491e8a2cc00b0ba72e6ca1014cda3a446289f6769c73d3a70074f3c76c975b5f190b0d500d9fad4c950d1b2f31ccd4fbb7aba6ee7e0158d101ac5","ssdeep":"","tlshash":"688138612798c260fb358c5927d1f9a2596b709baecf1dd88e97762308f60717bcc300","first_seen":"2026-03-03T17:23:28.611658Z","last_seen":"2026-03-03T17:23:28.611658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/css/root.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/css/root.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsjizCfNsvs2ssAtjo7YUgiBvpyY0BvxGG3QnTiF6jKGeqhpSD4vvR4D4LTMx0vy1nc4keXtzGeq0H%2FKq7paiQIQGDuHy%2BTC8l5VPg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4dd895bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1467471,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11070), with CRLF line terminators","md5":"6baf15485868250bef39024411be6434","sha1":"9f376bd26825f5bfdf0e330f7ebba9fcaffd270e","sha256":"a45b1b0a808c20ae360d6ee4d1eeb35dc2c742dcd65da48c4083cffc64ca0d31","sha512":"45515aaff848ce8b38338b203d9c8f2f82da5ae15b88fd02d1d12b9164eb4c88a6b5eaaeb77ad131e42d72bbe2fee0f1f2012654f3e2ff8bb8f3a1c2fde0dd7a","ssdeep":"12288:QMlXqMlKMlXqMlXOMlX6MlaMl9lQrgM9MleMl7MlqMlkOMlOMlMMlPMlX7MlXjMw:d","tlshash":"b42584b7e546140341739a7b9be3a378db7c40278b0160a639eeb5444ff41958ba3e8f","first_seen":"2026-01-22T14:55:17.970529Z","last_seen":"2026-04-14T13:37:51.703108Z","times_seen":19,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/1/js/chart.js","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/1/js/chart.js HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=il3YjDNHWHhAed%2Fm%2F0ZGNVhi7VjPGyl%2B9Qpt3J41SnJEtFkSuwThADOGfG%2Fu10m6kKeLsg3az9uWJuTB1zeExF940wA25dq75%2Fk9AQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537efe1b95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205222,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (57104)","md5":"ddb8b0991b8bb5d93eba1b0d2a64cffa","sha1":"31298e4d3433c99cb3cf44b72009f9bfa0342c0d","sha256":"0e2326c6868072bec1592760c6729043caeea2960a2b46cee6a2192aac6abff0","sha512":"6784496b7e8a97ce2e9e87afcf7c32674b850cc8fb95f6b102cfa18aa5d779971783fae37584da7c05f13ff84a4aa5bc5b0a37bf07e0d95fdd92e1f97ca3b66f","ssdeep":"6144:HycGOv7siC5tTzhSGmeab2OLK8rTleMR5LTDmNV0Fz42HRcXj2c:S8siC5pzhSGmeab2OLp9eMR5LTDm/0Ru","tlshash":"f214f5d53342b12282d256d6583a050ae3366648354789acf2bc5ddf3c6a98b71fff38","first_seen":"2023-08-25T08:23:08Z","last_seen":"2026-08-07T20:34:33.493594Z","times_seen":458,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.static-global.com/xt/xt-ssr-web-index/_next/static/media/XTFont-Bold.435252ff.woff2","fqdn":"a.static-global.com","domain":"static-global.com","tld":"com"},"ip":{"addr":"3.173.161.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static-global.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 10 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:4F:96:9A:EE:4B:F3:8F:34:FE:12:3D:ED:9A:93:50:95:6E:05:C6","sha256":"9E:44:25:BA:05:DB:78:AD:29:ED:29:63:1E:DD:A1:E8:B9:CB:F5:A1:54:0E:68:40:7E:C4:7D:E4:75:A6:16:C0"}}},"request":{"raw":"GET /xt/xt-ssr-web-index/_next/static/media/XTFont-Bold.435252ff.woff2 HTTP/1.1\r\nHost: a.static-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 23856\r\ndate: Tue, 03 Mar 2026 10:43:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Mon, 02 Mar 2026 09:37:29 GMT\r\netag: \"8d9d55e7daff9a84b2a1550c631b9cec\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: mS3knV.3wVvKYQUezpXL_.bcxoP43ZJv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e70b5396a94f70fe0478eaebad6b4d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: D0uZrwk1dvqx9EFgkW-1m6PsBwM4nENr5JZm42_AhplOMawf-2_HkQ==\r\nage: 23973\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":23856,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 23856, version 2.26214","md5":"8d9d55e7daff9a84b2a1550c631b9cec","sha1":"b13ef583c4dcb72b0038653f9fbdcf7466e1d7b2","sha256":"eaf409222a272bb01a0ce1b8eb57a3bae8088d58ea2152ee96896e0bf47a91ce","sha512":"3e86eed3b65ba9be84a6acb0786ca02537addf7034c880e51bf3c79dc0aaf44b0fceec774f6542359bf21a43e02f0b51f80b76b44db819485471440a9c33f2fb","ssdeep":"384:XXf8xB6gKQlE/QGxOyGYcfRRJ5NRFWlC3+Ek8JBA+ROYLIUUWUUUZH:XX0x9GOqARhRFWM9k8JBhXjNi","tlshash":"fbb2e00dbb84ef27d7d90ae084ded8a8bbced0f5539dc8254d000e52d6c18dba29c05b","first_seen":"2025-12-01T12:23:02.268644Z","last_seen":"2026-04-14T13:37:51.746406Z","times_seen":14,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":174,"dns":60,"connect":21,"send":0,"wait":28,"receive":4,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/b3ac0e98-f123-42c7-99a5-429667d2b049-1738451413542.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/b3ac0e98-f123-42c7-99a5-429667d2b049-1738451413542.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 407925\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18WVYGToAt0leKKoJtQeNGJP%2Fnw1UtWjFs%2FL0lCCzUvVsuleQRmf8lCUVb9ybcG22K6kfkUxSQna4vJZOv0OGOWifJ51RE%2BmZjSWsA%3D%3D\"}]}\r\ncf-ray: 9d6a537efe1595bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407925,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 499 x 499, 8-bit/color RGB, non-interlaced","md5":"c7e6e6362b9e5ff5dc80f52a5dba2d23","sha1":"c73021853ba377b8ebcac4a0955431ce07a8f71b","sha256":"d105411c488b37967dfd3e76a46286adf9f8ca3f4814bb96c6f5f494693f931e","sha512":"05e4f9e1f2d46ae9f332adf0fc6a3f1c0b48ecc68d8d70096fb0c321b30c4b17a51f9500f54c53d5b6f23132ca6ca90c5a84a21da7effbd0adaa7f0485d56aa2","ssdeep":"6144:Yds5qiAUembQp8C+A1eBEzOva+JU2jXDElR1aglocYzsiuCoKt2NXdn:6s5deQQp8ceOOvLbDE31zucriuCan","tlshash":"398423ebfb9caecd8a47a777cb690fcbe964108d5f240b365844b121322d61421a7fd1","first_seen":"2025-12-01T12:23:02.253614Z","last_seen":"2026-04-14T13:37:51.685133Z","times_seen":14,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":232,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/market-screen-d4e7e3661519de443c94b93ed5c5f072.webp","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/market-screen-d4e7e3661519de443c94b93ed5c5f072.webp HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/webp;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 83916\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpkEp7WFV42TV9fbTTqLp3W2PczLAom7JA2h8K8fCGYEkqJrYb%2FdgvBT7FJitZyzwtSho4SA2YmLi%2Bw6rVjxTSqksXhnQVC0dqgi%2Fw%3D%3D\"}]}\r\ncf-ray: 9d6a537efe1695bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83916,"size_decoded":0,"mime_type":"image/webp; charset=UTF-8","magic":"RIFF (little-endian) data, Web/P image","md5":"d4e7e3661519de443c94b93ed5c5f072","sha1":"43984ef26f586a222c010307970c4c71b677cab1","sha256":"402a26c09727a7f8f8023187801469edb4e9f19158e0dd6fee7e48ddf59b1f68","sha512":"6f59b167f849f0bcefbcabc07703486df33b5a865a5cc3a059028dc600ff61443bb61372b11795f9c67a1e8759dfc14a3e9da2828a22b70c7fd45dceb075c2f1","ssdeep":"1536:zk5jV8pBaG5l4pgmOMAqzTCAG7ZKFNmPF7L6G:Uj40TPz+x7ZtZ","tlshash":"4483026072461908114b8a7725ac520d64b03d1e8ae17bb7ef85b0584ec6bf9e39ac3e","first_seen":"2025-12-01T12:23:02.266403Z","last_seen":"2026-04-14T13:37:51.740049Z","times_seen":14,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.static-global.com/xt/xt-ssr-web-index/_next/static/media/XTFont-Medium.e32ab31e.woff2","fqdn":"a.static-global.com","domain":"static-global.com","tld":"com"},"ip":{"addr":"3.173.161.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static-global.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 10 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:4F:96:9A:EE:4B:F3:8F:34:FE:12:3D:ED:9A:93:50:95:6E:05:C6","sha256":"9E:44:25:BA:05:DB:78:AD:29:ED:29:63:1E:DD:A1:E8:B9:CB:F5:A1:54:0E:68:40:7E:C4:7D:E4:75:A6:16:C0"}}},"request":{"raw":"GET /xt/xt-ssr-web-index/_next/static/media/XTFont-Medium.e32ab31e.woff2 HTTP/1.1\r\nHost: a.static-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 23648\r\ndate: Tue, 03 Mar 2026 10:43:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Mon, 02 Mar 2026 09:37:29 GMT\r\netag: \"d400b3c1c60c4a8ffc0f19b867e7ad65\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: w4X__91gTLhi.cmfqtJ._I22bHDOvLht\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e70b5396a94f70fe0478eaebad6b4d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: PCRUuber2yeF-hg0XJFtzl_R8CN3OZBDYapKV4TTXUp-ZJiRWn5Vxw==\r\nage: 23973\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23648,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 23648, version 2.26214","md5":"d400b3c1c60c4a8ffc0f19b867e7ad65","sha1":"ce29d9ffa5479a00ad51c59ea4ea9451280577c1","sha256":"a0b6aca83fbe0bfe3d1c5c8264508fc70dca85c734cbc83be44b1a7c15331a42","sha512":"708cf80017c14b6d7b8d4b16832931c8d4b18a46bbb3fbb0795977148d8f601f94b4fd3e1231c933d80b4f2a4979e5b970d4d0114a6ee64be932a72614181c76","ssdeep":"384:pt7CFP2ILty3ViWwoxCciXbx6gXbuKD4L5ysSWKlLJ4sX61MfJURtJiZC9yQRfyC:ptu0yycWwoxChxZKKDbJNO1iWt0C9yQn","tlshash":"c7b2e1c6be3b0da7ddb8aed8c1903d751e11750985d8876f830881264fae1a0ffde51a","first_seen":"2025-12-01T12:23:02.238387Z","last_seen":"2026-04-14T13:37:51.750763Z","times_seen":14,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":254,"dns":51,"connect":21,"send":0,"wait":29,"receive":7,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Thu, 30 Jan 2025 13:25:48 GMT\r\netag: \"679b7ddc-4d\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: GNLMKbz10oqwJQlPAbNt0xnjxfCS5WzlsnvkGue1kp9iyf-3c-ciMQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"136f5552348d90a36b6c9a49046926c1","sha1":"b992325f95e0076c147ebf6593433f938b244f4e","sha256":"a60bafa499acbab1b73b92511707557400155adf5fd6a186cd56a2b822935ba7","sha512":"b790d85cf0597615435cf72e9384f8e640642a1cc3cc3564010a006eedbf5bcb956120cb81ebef9254d4675e785091a07d2cd79c66381fdc39b80ee5f4e48b8e","ssdeep":"","tlshash":"baa001f9a5a62009e92076c01cd532941c8983a030d24a102ac13969b55562ada06299","first_seen":"2023-12-04T13:46:15Z","last_seen":"2026-08-01T13:57:27.111401Z","times_seen":537,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":67,"dns":4,"connect":2,"send":0,"wait":243,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/lin/future.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/lin/future.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 63899\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XB7kv6To3OGHDXyNwdYA8z%2BoOY9iKIIG5uFe2MoMn2QOusb%2Bm8Gt269RIg5qQVrCXLelTC3KgDzg8Cf5ooGZ64o82po8hX3HKfNkQ%3D%3D\"}]}\r\ncf-ray: 9d6a53842f5c95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63899,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 328 x 328, 8-bit/color RGBA, non-interlaced","md5":"fdc182a144076e62132b500db192e726","sha1":"920dc9db395461c8e42749bd50545f736f07eb34","sha256":"59e0c464cded95e8aaddca17b4b0a03066e5c6f941c0a03d7a89af5ce7105299","sha512":"f04b6b75ff0f5a4bd121ed370dfbc86ffed951d77e216ddbf1d665aa97041e6afa89b47efa2b1ec291a643bfe390e0d86684bf65a2ee89be90ec7aa8d571e0ba","ssdeep":"1536:Xg5nmLPGUsVkxtaQpvLyFtEYLGh5oNNQYaylyLEqf9j6Ko953Ssh:wkbsVkjhvGFRLOaQVFL5Vby531","tlshash":"f853023be94bde276020fb461a85f3b58d5c106d4b409cd217eaf22f9663057abd8f06","first_seen":"2025-12-01T12:23:02.189199Z","last_seen":"2026-04-14T13:37:51.711671Z","times_seen":14,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.static-global.com/xt/xt-ssr-web-index/_next/static/media/XTFont-DigitsSymbols.d3a22354.woff2","fqdn":"a.static-global.com","domain":"static-global.com","tld":"com"},"ip":{"addr":"3.173.161.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.static-global.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 10 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:4F:96:9A:EE:4B:F3:8F:34:FE:12:3D:ED:9A:93:50:95:6E:05:C6","sha256":"9E:44:25:BA:05:DB:78:AD:29:ED:29:63:1E:DD:A1:E8:B9:CB:F5:A1:54:0E:68:40:7E:C4:7D:E4:75:A6:16:C0"}}},"request":{"raw":"GET /xt/xt-ssr-web-index/_next/static/media/XTFont-DigitsSymbols.d3a22354.woff2 HTTP/1.1\r\nHost: a.static-global.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 101356\r\ndate: Tue, 03 Mar 2026 10:43:26 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nlast-modified: Mon, 02 Mar 2026 09:37:29 GMT\r\netag: \"be2e2f2d0eef740424eead1425d2b541\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ew2EdBSoQfRuLO9iDyND4SM85ZTibVUL\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e70b5396a94f70fe0478eaebad6b4d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: 5gj2Uq53jM_YfxirmXj4HoGzaE81CiXZ96F2Ju0gv5gejzClwXV5AQ==\r\nage: 23972\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":101356,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 101356, version 3.13107","md5":"be2e2f2d0eef740424eead1425d2b541","sha1":"1cd112c2be08dbdb739fcdeaf22c49a47fc9bf33","sha256":"7bdd4022194f5aaec129f19514491a752af077a99a15ea90cefb23353bd5e83c","sha512":"28d166edbd986b9eaa7bb91a2170769332a6e13326dc50bbf9093383f2614cc39ef8dec9de2070e2c7ff53df353a46dd9ec71ea6ba172871a2227332eebcfd70","ssdeep":"1536:S0wqu9cR3o2aRfoT24gS+DLhGAXCFhphN1oIWZEBnITGjpJ/C/iZCzHo2AJJhP4w:VNuq15T24gSgGfFLITGd7J260jk","tlshash":"6da30270e6eef06f809263dd23fe641f9a0e1f193211f666ad8514769cf8b6d488871c","first_seen":"2025-12-01T12:23:02.166822Z","last_seen":"2026-04-14T13:37:51.678322Z","times_seen":14,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/coins/SOL.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/coins/SOL.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 404\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qo5b8iCOGCr%2BysFUlXp9AvTOAOfayW1EhLcGVyigRK%2Fk%2F7UtZpPNjmSHN85OLFtstmCmP0GjNSxFjbOFxkuwA1%2BnrPp%2B9ZG%2FVucnpw%3D%3D\"}]}\r\ncf-ray: 9d6a53866fff95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-06T05:29:05.030411Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/admin_icon_dir/1764013499894.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /admin_icon_dir/1764013499894.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 24 Nov 2025 19:44:59 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uqSHXfUjocfI49j0aI6O9ko3JBYAeYWBdqCrVgY%2BvNHlD7WsZfX%2BABpGF5tzNd8XBQNodsMQJOpjZiZ6PDR79DnFeATWBa2OJUTrg%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 883690\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4dd995bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"64d0bd71791d6ad02397f5132e040e77","sha1":"43f4b9e8739a4ebc7565ff238001e4fcdc0d642e","sha256":"e6f63e0cc620715b80902406afe73a3bb28c2fccc2d75edb869c6be89460f6dd","sha512":"80ca5ca39fefb7d58e62d30a488c425ef26bb44ab716f105e309410b182fe91dc7959030b9af868edb9c0eb7d4efd816a6bfb597e9ac041547db49e2cfeab691","ssdeep":"","tlshash":"0121cd7fc7185cb7f12b835de2e0901601a66149e6c8c7a5e7a4bb1f2411da31c297c8","first_seen":"2025-09-28T21:47:55.776457Z","last_seen":"2026-03-03T17:47:16.408675Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/header/market-cap.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/header/market-cap.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vuODBuZ7dTfHzhipWvyD8dvwqWsl2F0qCDp2qukGqcMTQa8o0OvPMB6utk3%2FNEWiJ35Osj4GrqmxTqv7lC5dpt3VYHasWLTE1zhGAA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4dda95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"015d0ef263c3d1ef530a67a71d1a2f1a","sha1":"593cb215f72eaec34572f204938ae414cdf8331e","sha256":"c2943e19d05123d8663e34498aef1ef65a8f387f77fcd2ae6a48b7a429b122d9","sha512":"c2e7f9a56b57136f2e05eda5f40a7f213f44208e0faa9b938a8136dc5c27000b1cbe779583a85ffd2b2024489b7149ad66302d0b84c756179658afc0f95b1118","ssdeep":"","tlshash":"214132e81365473e5658ab0559b94f45742160927f62018cf36e3d1bbbc2e9b208cc65","first_seen":"2025-09-28T21:47:55.790713Z","last_seen":"2026-04-14T13:37:51.765172Z","times_seen":24,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 115953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-07T20:24:14.77687Z","times_seen":256710,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":144,"dns":1,"connect":24,"send":0,"wait":8,"receive":6,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/coins/DOGE.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/coins/DOGE.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 2808\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUe5l2m%2FWLM6xsVG34fkT0VzmRtsH8%2BpWOPQivQhHKD4%2B1yzAyH96cG5T%2FK%2FmCcAyVLCs14PKCn7yJOCWsmyQKyztdw3MZk%2FFuqviw%3D%3D\"}]}\r\ncf-ray: 9d6a5387485395bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-02T14:27:27.418081Z","times_seen":997,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:59.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1236\r\ndate: Tue, 03 Mar 2026 17:22:59 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 4fa6112e-e631-49dc-a8fb-9286faa406fd\r\nx-mbx-used-weight: 19\r\nx-mbx-used-weight-1m: 19\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: keydrKBChMUAogg6QohReT5TYYjeeL4B04BweYekFgyt9fbaCcfEbg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4042,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1414f2f294cf9822d93647bc0260a3ec","sha1":"c6679ef7860d2c323d7a021016791397e2a6c9a3","sha256":"a1681fcbb1b89d94f376014de8fafbf7e2992734901751d95728c6590fd9d94b","sha512":"644ae47386f1dc16aa09be3e481d94f1b6e7f7906f249f96109122f8b75994a87608d337886a4a12fc46d081d94f664de84dec136d1095c7fc200668356364dd","ssdeep":"","tlshash":"da81d151179c86bcfa364d492395b9655afb348ebecb1fd895a2392338f11b2670cf00","first_seen":"2026-03-03T17:23:28.625723Z","last_seen":"2026-03-03T17:23:28.625723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:23:00.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1228\r\ndate: Tue, 03 Mar 2026 17:23:00 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 69e33d08-6cce-4b59-9523-32ab7afa8919\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 1-GssOsGPKhoWKZtXC-gxzOspbi6X5OlMUE_oFj8JP_iPldgfuSAKQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0db40f1f5c91763d7b9b62b1e4da580d","sha1":"24aa83ec58ba95063eb3734153399d085a3803e7","sha256":"ebb1b7e78e9c9553f21d5fb1af020ec7f6c97dd332e2dc2a8113dced018d5e03","sha512":"e4c2f006cb82fee6c0d36156efcbd481d2d1b45dc7a4aee0f958d0f9020eb003d3daa3893bb925e06e0bd7f5cda640164108e28707760d7351526b610210feab","ssdeep":"","tlshash":"ba81e2901f9042a1f9f65d8ae7e1f6a52a2a349badcb4fc845d3352f18e1372531cf14","first_seen":"2026-03-03T17:23:28.62653Z","last_seen":"2026-03-03T17:23:28.62653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://egonswap.org/","date":"2026-03-03T17:23:00.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://egonswap.org/\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1118\r\ndate: Tue, 03 Mar 2026 17:23:00 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 7f81737c-64b8-4212-afe1-14dc286e48ec\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: X5j5rJB_c4yxUhIXSIG1qCT0WhkDd8L7YV9r2RTDDrSAVVfxXb8W2g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3972,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1d5a33f405cb5f24fed5ffc99cb2a90c","sha1":"d34d9da90fd0c92207c8cd11635f88c1ed06a971","sha256":"e388a6c1164deccadffd9c362446c15ac322d3162e696b7c8f353b61ab84970a","sha512":"3f1fd6ddcea1dabe1a48d57f88d418cf7cb5f1409e7c91ccdb803968a77055bdf464239784beae69cfa9453de43b1eaf19924dc2e90d0f59c765821a16fb4f47","ssdeep":"","tlshash":"2381be6046709290fe35844d27a2f5912d2ff09faecbdfd889d32a234da12f5a758f14","first_seen":"2026-03-03T17:23:28.627693Z","last_seen":"2026-03-03T17:23:28.627693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/91d128b9f2de30f3.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/91d128b9f2de30f3.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJHaGsnViR0XfWOvJlkeXoKKRZNExtyO%2BlY7Sjq6d4LAa%2B2QovT4%2F0mf%2B4X%2BEwd55mtMtxpBebkNxU6IY7TR2tn8tbDDpoFKMgizog%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e3dd195bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1819,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1819), with no line terminators","md5":"2b2a3e707bffbfb10a3d31e59e7c6739","sha1":"d4388ea4f079b26604005b674b6283363896b3f8","sha256":"896d2b9197c7f09a0157f13bbffd4b1cf6225356f9a6625637fe64e4ccc77437","sha512":"398d57aba944d131858041ecf1a01c0532273431d4824dac4c378f503bb59226109c4b4cdf4b1abc77cad67be347773679518b2874650dd1b9ac9c3fc075fdf0","ssdeep":"","tlshash":"00317e136134e0bf7c169f73708e05482ea96571760a3af0e955af6bc54309237b3bc8","first_seen":"2025-12-01T12:23:02.183488Z","last_seen":"2026-04-14T13:37:51.681868Z","times_seen":14,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/img/header/heat-map.svg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/img/header/heat-map.svg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwGG8F7pU8Zel23qkabJnEERuk8cZovYvUYy8TspIvpaKleR%2Bhcrwb%2F4nDeYYvrhqp8uvEvguak8Yleeg%2BzVBsSOMDGMHfwlSOeBRQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e4ddd95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7b135f6abe0af82ac156603b2b0a4abc","sha1":"a81f5fdd6f09ce51b1fac7d0e393e8f76f6cb6af","sha256":"d952ce64697aa27decd14c1cc82e29b3f15c647a36b8535d5abc392798b722f1","sha512":"29de677b849e8a1a6781dc33bb668d459a60f10fb07a994491da8efc91780f045f91ac855a1fcff0e4457ee09510edf66e032f80ae5126a9b2cf66adc166a8bd","ssdeep":"","tlshash":"584176e5173986790b18d72c59797a061eb214d726b184acfb6e293a3743dd320c0f99","first_seen":"2025-09-28T21:47:55.756033Z","last_seen":"2026-04-14T13:37:51.745089Z","times_seen":24,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/js/main.js?v=3","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/js/main.js?v=3 HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYx%2BUR1CCfN%2BEqeqnRjIBMUo0V93d86bgcPs8hgVpFeyodt%2Fc%2FbgZGcr8xnalDyXVBk6XhusVavfulCZUsIQn6mbF%2BPngzBjgZkvGw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537efe1a95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26617,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (430), with CRLF, LF line terminators","md5":"b10fc4cc7e2243b75fa9b1871713bff3","sha1":"17cd917a6f52e67ddfd6f46e10d5bcffc3c75987","sha256":"9e354a7b686dbe2fb030229b88aa6d30751d5669e319cebd0f329a0a7b4ba1d2","sha512":"d05cd8fc85e3e60207933adde1c65fc84314ae0335b922fc3b6e9aa7eadfd28984958966199cfd9234263f98430d37998dc0f7a6f2eb4c7836d7fab03825fba3","ssdeep":"768:GXKko7s81DlcUQwlWTldlIlhlfl0dnknyc7aS:GXK57s8cdw","tlshash":"79c2a6a872b114a58237737d7eab5a46f6342027d201d749bdac0ed01ff2190d9d2fae","first_seen":"2026-01-22T14:55:17.961331Z","last_seen":"2026-03-03T17:47:16.417429Z","times_seen":15,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"egonswap.org/fonts/inter/Inter-Bold.ttf","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /fonts/inter/Inter-Bold.ttf HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/assets/css/root.css\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: font/ttf;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiODShgJrvVjPAVHgDRE6F7A95LiPbOp3J6TS5VpJJHzTi%2F38DJqfr4gdKMDQJlHh37moDsZ%2Bpf5yXWH%2FSNyfGgg1UYi4wgHZI3Xzw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a53832f1095bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316100,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte","md5":"275bfea5dc74c33f51916fee80feae67","sha1":"48747b7a60086f97af0d373febcbd1f1bee87f17","sha256":"790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe","sha512":"0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11","ssdeep":"3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF","tlshash":"08647c03f313c35dc9172d3a8b92c7a0b327bc926b12e10ab7243a55c99b4f85e6b5d5","first_seen":"2023-05-10T15:50:10Z","last_seen":"2026-08-06T18:13:26.120704Z","times_seen":1636,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://egonswap.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 115953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-07T20:24:14.77687Z","times_seen":256710,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":102,"dns":1,"connect":19,"send":0,"wait":8,"receive":10,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/2259b3659db4e4e4.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/2259b3659db4e4e4.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BrmSQYB2lWeAqH%2Fkwp%2FkGb7LrAmzg3ydM1B67uP2mnO0XRXckM%2FHvVuAwJ%2FcV6gAQDakLljuRI4%2BycAgnCcpPHBCgs2HXswycUGuA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e2dcf95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7600,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7600), with no line terminators","md5":"488c874539e8e6bcf6b521cbec29cacd","sha1":"3e621b02a21d86295aa12881a27bc719b4b5bffa","sha256":"f9359bc78be3c61d80a8f1bb359631851295f20e5a9c66692df8c7c2e447603d","sha512":"2df5ab52dc51e65e1a988e4ca36a9dd065cf36393ced4ac370281807aab4b27b477e0bd27a951084a14eb98f3ea5de021fc00677480cee5321f9f9c783618b1e","ssdeep":"192:oEn/SgYR0QFwMqMUlIP9ZqiXDDIEbNDni5KNs:oEn/LM0QFwjMUlIP9ZqiXvhbhNs","tlshash":"05f124dfa161267cb1a78cdef6f9ea4673658803fb0786e1e940221d02d7bd1d670b06","first_seen":"2025-12-01T12:23:02.201269Z","last_seen":"2026-04-14T13:37:51.717676Z","times_seen":14,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/6c1c4a225685b786.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/6c1c4a225685b786.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7n2pg68Xq7OpdmABWwG9YWeGWguZBKJHbruNU5sJpVKzgbgnAdFUMMkYJOFxMDnN7YCEolHww1w%2BlA%2BVrtqrhUL4cgoCFBc0gRijQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e3dd395bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2477,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2477), with no line terminators","md5":"3b8d9b9a495fe0030b6ea3e1f562d8a8","sha1":"0ceb6a436650336a504c37a9574312959b94fa3a","sha256":"0e97ad3610d4afaaab3bf2ceed9caebb3c279c7d09f6ea6014643bd4df74644f","sha512":"99d68737598599b274afb41a68db2ae5e1ca712df961756b0e2cb2307bf48deb75dd684d15472947d1a5fc52056b9f4e923c63249bc364a3c8f1793fb9bf7dc7","ssdeep":"","tlshash":"ca51cca74e4d512d8842e87cea9a86cf569c848bdb3e35f4ac7cb63dc1c8b411520b78","first_seen":"2025-12-01T12:23:02.280974Z","last_seen":"2026-04-14T13:37:51.701584Z","times_seen":14,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.okx.com/cdn/assets/imgs/243/F485DEA432C68FD9.png?x-oss-process=image/format,webp","fqdn":"www.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"104.18.43.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 01:29:42 GMT","end":"Sat, 16 May 2026 02:29:39 GMT"},"fingerprint":{"sha1":"08:1E:6A:A5:48:C5:FE:15:91:71:F3:91:F2:62:64:F6:3D:85:71:53","sha256":"BA:1D:5E:3E:03:94:6A:29:2F:55:A4:89:AD:87:C6:47:B3:C7:8D:09:0E:7C:0B:C9:E0:8E:CF:92:8C:1C:E5:DE"}}},"request":{"raw":"GET /cdn/assets/imgs/243/F485DEA432C68FD9.png?x-oss-process=image/format,webp HTTP/1.1\r\nHost: www.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33316\r\nserver: cloudflare\r\nx-oss-server-side-encryption: AES256\r\nx-oss-cdn-auth: success\r\netag: \"005C7F50C9A9476191972B11E99A4329\"\r\nx-oss-hash-crc64ecma: 10888396638661626794\r\nx-oss-server-time: 98\r\nx-oss-storage-class: Standard\r\nx-oss-object-type: Normal\r\nlast-modified: Wed, 20 Mar 2024 06:01:57 GMT\r\nx-oss-request-id: 68F91EF7FC4F3F3834612E3F\r\nvia: ens-cache9.l2de4[0,0,200-0,H], ens-cache37.l2de4[0,0], ens-cache15.gb9[16,16,200-0,M], ens-cache7.gb9[19,0]\r\naccept-ranges: bytes\r\nali-swift-global-savetime: 1761156855\r\nx-cache: MISS TCP_MISS dirn:-2:-2\r\nx-swift-savetime: Wed, 22 Oct 2025 18:27:35 GMT\r\nx-swift-cachetime: 3600\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: a3b5f39b17611576553767511e\r\nset-cookie: __cf_bm=L_Nqno5Xgz3uAQTcwGiiln3UIz6JB5W2v3A_zwsPlZk-1772558576.472802-1.0.1.1-ZfLZ5VrNfBpj_4kVqQEwmSCPOUilhMUnlJvQiUmI.90sEcUqqnGwP.xltGhVd2ivbhGqxFQzEyDo.ZKmkZ3vOYAIaxUrhNwA8FdfGiEmOHMc3H0jZlGD9JubTVjOaVvn; HttpOnly; Secure; Path=/; Domain=okx.com; Expires=Tue, 03 Mar 2026 17:52:56 GMT\r\nexpires: Wed, 03 Mar 2027 17:22:56 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9d6a537effdbc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15677b3de11f01e9fdbbd4dcee7ec1b0","sha1":"e4f8dc1b7b0bf51a3e3f9e5e2c65f9f26054ee31","sha256":"13699543d73c353ed580c7caecd097ae6fb62b07c68431f60f78fb4e8c9bc19e","sha512":"04a0fea6f118413e0f526569e683599d93ddfd977e34b563f2e7e1a2fad7a3894dd3cb870cb3ab57c67bd0d99b2d8009dd81ae1e4d9ace4c7e7fb3e3d951e52f","ssdeep":"768:sq0gOOvcDxo1/9CCJUrpJkPssO4doUtdi1:scRUCJUrzv472","tlshash":"6ae20129f481012d234f41f9a29eba6e770c55f822e006578dd994e3872bc2cf5e72e2","first_seen":"2025-03-27T12:45:47.311464Z","last_seen":"2026-07-27T14:59:58.493147Z","times_seen":138,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":65,"dns":83,"connect":2,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/8.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/8.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 50926\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwm0y%2BRy7raTQNFSK1%2FBhzkfCfP6Ymlrk6brnZiwzMQ3hwp%2Biw1sl5nvJslC1lswiFWgVr1VAu%2FKty9TokXwuY5lB0B5Vkc11JNcAw%3D%3D\"}]}\r\ncf-ray: 9d6a537e5df095bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50926,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 864x414, components 3","md5":"7e96a6da66b401cb807190ee631ddee8","sha1":"d7ee0b6c66902f66f1081d8e0cc045b04d7ce8f5","sha256":"417a5f91c73b6bcdd93837893273aaca243680fbda61169d17bd9139a93e47f4","sha512":"929fe8a654a4d72a7ee02d5f76df62512acdc3e3bd4c9acadf40cac4596b2a9e37fa481c6104ab434907e53b03c47c355bba3352862b11b3f8c61c6fa9de68a4","ssdeep":"768:36JmmVP6F5d3Tq5vxRWLbok8dEsP8dq+F6cNrLOx4xm:36JrR6FL3TopRUoBdBX0NrLeEm","tlshash":"cd338b1b88588f97a558c7c47f034e9a2f462a1cb4d236ef90130dd77b2877a1d9c52e","first_seen":"2025-12-01T12:23:02.263355Z","last_seen":"2026-04-14T13:37:51.758744Z","times_seen":14,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nage: 11061\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-08-07T20:21:37.748062Z","times_seen":25766,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":39,"dns":2,"connect":26,"send":0,"wait":14,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/api/getLocale?v=2\u0026lang=en","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /api/getLocale?v=2\u0026lang=en HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: lang=en; Path=/; SameSite=Lax\r\ncache-control: max-age=10800, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4YGkX8lxUKmHYHNMELxwJ0FPX4t2SZDjbjgWS3O97sEg8plzeQuAQKaoEHUl6xyr29Xvp5eWaTPRHF0frHp60IVG8Bt%2BckDk%2FvggQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6a5383cf4495bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91745,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"51b06187094796b9b0c9c9bac05357b7","sha1":"32927f31bff0d2d486fd012ac58cf9fa168d4f5c","sha256":"64c0a0ca1e033b06f68be5e31673e4773fd063d6d145616aec0c4ba9d3636f79","sha512":"760bc93a5ff15be24ccadbd4af1825a5a4e7648ca6b9eac556fc5c50aaf660d43969955b90245614f7869374c01971d895b48010536e517a69469404e9b83d65","ssdeep":"1536:TCg9prCI8XmuD7CimEtG6Jj+VVSxXcyDst5seF:TvrGXmuPCilII+VVSiyDsTP","tlshash":"1a93fa0b991e3a724bc613d1fcee5ddc71be024091e190295aed84ac15edfc9c2eb897","first_seen":"2026-01-22T14:55:17.976888Z","last_seen":"2026-03-03T17:47:16.43266Z","times_seen":15,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":67,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/lin/saving.png","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:57.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/lin/saving.png HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:57 GMT\r\ncontent-length: 77450\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YG0Aso%2FwMHTUoR7LCTN3KchRTPEuO8eTXhP1EQmaCC%2BWh4B30C3MDD6gvq0lNdO8VK9hHg1BxCBuOWVyfGrcyldAWY7mlF7Gm06%2BMA%3D%3D\"}]}\r\ncf-ray: 9d6a53842f5e95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77450,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 328 x 328, 8-bit/color RGBA, non-interlaced","md5":"7b32c80b93f0a5d39bc4d47d0b3ec66c","sha1":"bf530df7e421de1b3c3977dbeaef8dd7cbe79137","sha256":"aac71a4d758304fd6323a30e76e479ddc84ebdbf6d52ea58fc5e574756851b28","sha512":"3bb7267bc43d1fd6b506691bc5530ce152212744a8e27548578dd5f692ea282d01306e0f5be798ac25f7a998b253b2b79df236e941ed1dd8e5331563d2bf95c6","ssdeep":"1536:lLfCSIC2nEbwtNn4qeN08sf8RXHkOgE7jaq3pDeNtjFr2uDIaF2PMFIZMo:lLXIVnEbM9Z8O8RXHW/q3pYtIuDIOF+l","tlshash":"f07302fa5e30dbae295fd41030d25bb7f074ea7a7c34d40e4cf19ab522ac6db6612814","first_seen":"2025-12-01T12:23:02.186841Z","last_seen":"2026-04-14T13:37:51.707637Z","times_seen":14,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/4a23df7086b8b1f8.css","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/4a23df7086b8b1f8.css HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2gDfcjvk5AGGZPx1ZmogKDpp71ViX9qeZxsC3MpjRHMKEXmWlU%2FbKebTIKx0yfZ1riNB4QQerR8z%2BO7oeahjPWtY%2BFeZYZS4K%2FwEw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9d6a537e2dcb95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1205736,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"e9048c218b640df4e7db5f1e2d7d261d","sha1":"3756e23b1b321485ffe672b06888a3d682ea65f5","sha256":"24b8f3dacd7625ce32be1731b4bb46f97967873d06e976c9b6dd4f9c32ccb210","sha512":"44bebc208b3d021c702565981f0d70d0c8159e2410a66dfa938282a1e61a017aabe76fd8561773bc36d1a2746a2bbaf6fce1b95c3c17cd0df2169028d21dc9ce","ssdeep":"12288:J3aIksULejhAax+snjzIKwDRkr8O0XawDPLhWZZ8TaICf1PpHwt7O30mBx2tVqm+:Jx","tlshash":"712564456bb30859a417d37d67abb615672ca003c51fed2abb9c3e4c8fc9548c0a3b4b","first_seen":"2025-12-01T12:23:02.199004Z","last_seen":"2026-04-14T13:37:51.782733Z","times_seen":14,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egonswap.org/assets/landings/4/img/4.jpg","fqdn":"egonswap.org","domain":"egonswap.org","tld":"org"},"ip":{"addr":"172.67.198.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://egonswap.org/","date":"2026-03-03T17:22:56.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"egonswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:34:39 GMT","end":"Thu, 14 May 2026 16:28:24 GMT"},"fingerprint":{"sha1":"6A:A0:EC:84:50:88:FF:73:34:7D:B5:7B:78:E4:D3:8F:B3:CA:73:8B","sha256":"C7:71:2A:64:D0:8A:70:33:B5:1F:FB:0D:AC:A4:7C:81:50:55:4E:B7:73:BA:F2:AF:96:5E:28:6B:E8:24:7C:C2"}}},"request":{"raw":"GET /assets/landings/4/img/4.jpg HTTP/1.1\r\nHost: egonswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://egonswap.org/\r\nCookie: JSESSIONID=B6813F96E708667FD2C0C27F52E09F25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Mon, 09 Feb 2026 07:32:56 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/jpeg;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Tue, 03 Mar 2026 17:22:56 GMT\r\ncontent-length: 97400\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTiD3NFSNWj88zZR%2BawhYmSDUyQGtwR34rOFV5My0EY3y%2Bp7WZFe1MeWKOiabcwabxKoyMDEt31sjubL4snYVe%2BiY8G58%2F9I8ZGJyA%3D%3D\"}]}\r\ncf-ray: 9d6a537e4de795bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97400,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"PNG image data, 864 x 414, 8-bit/color RGBA, non-interlaced","md5":"8bf245d332e75ef64bd8f5de96b9bec8","sha1":"accfee5af47bf0195eddcef925a04b3b961861ed","sha256":"99d1a7f6504efeab281f15539469442164211804667e338345ac65100d9dc2ec","sha512":"f72761eb959bf09f3e509d8f7e775266e308776365a13913410271b296814722b64281d81d43843c0183ca0ea840003dd93b71eb8f6ca24c16131eec1c412dd6","ssdeep":"1536:Jl3AF+Tn3JXeATc6MGMCsBcfQQvGooxyjyL+cvoJ0q7QXidSSL8aEqp2daEwb2UW:LA8TnZXeATc6MGNffQUhkmyiCoJVcXqK","tlshash":"469302ecd1c7c2819acb6089e274bf4e8a7bb541709419e0dd97a49ea27f7c251810ff","first_seen":"2025-12-01T12:23:02.261472Z","last_seen":"2026-04-14T13:37:51.774413Z","times_seen":14,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"egonswap.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}
