{"report_id":"18593b46-324f-4fd9-a4af-63cb92a78a80","version":6,"status":"done","tags":[],"date":"2025-07-08T18:26:35Z","url":{"schema":"http","addr":"oreswap.com/","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oreswap.com/","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"title":"ORESWAP | Open the world of luck and rewards!"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-16T18:26:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"oreswap.com","ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-06","domain_rank":0,"first_seen":"2025-07-05T20:02:30.441107Z","last_seen":"2025-07-05T20:02:30.441107Z","alert_count":47,"request_count":47,"received_data":1637946,"sent_data":21211,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/app/global-error-fe201d1ef534f112.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ca48ed0d2a1a5682754bac07d67d8fd","sha1":"7c9f9f86aee10c66b96aa5ef12159df0e36f0cf9","sha256":"a70d13ae98e69275eac6f58c2d6aa8036ace599fc4e72660df186ad6127acc9b","sha512":"6be3f50c376712f38eb378071c6eea9f636580b4e9fb92961b47cbdf5ce8fe90f358f92d7deb99c30915b67e0c842f325edb93562fc33d57df1bfd1ede4c6b03","ssdeep":"","tlshash":"6c21118db0817994665ba8de926f940d719b259d100e2cb3d9716cb01c663dcb903fcd","size":1388,"data":"","first_seen":"2025-05-09T22:20:49.02016Z","last_seen":"2025-08-22T23:57:26.217164Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/app/not-found-7e7b0b0e9b8f6570.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f06c2493bc081c4707fc2a5550cac9e","sha1":"1cc684e94cf0e085930adefddbe86e95d19e8812","sha256":"c483c4dab60c2392af4262eab448f856bad96b430e9fa6ac6bc7babbf05d6d40","sha512":"4ddb6256ed8d4725e34c93a0d26e8246d6686b75f826a4af5b2c84600024b34be0985392833f59e1715751eb70780ee04a51daa7df01af638a88b817a24d17cc","ssdeep":"","tlshash":"0901520931c175c8b6036cfc50bf9809306f2698008e54b2d8b5ec912d2228cba43fcc","size":822,"data":"","first_seen":"2025-05-09T22:20:48.97099Z","last_seen":"2025-10-04T20:33:26.627174Z","times_seen":440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/main-app-df523c8931f70c0a.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"780f1f062143f470ccc751e8e9d0ba05","sha1":"c9deba27d87d3e1b411b741a1d7249479fe500b5","sha256":"82b916c2ff6e9ac8cdc115f596700aff44c67c4cb3fcae2c6dad80a6baab40fa","sha512":"77205548712b78834d6277e82f573ab652162e8daee458234ee877477cb98410450a7465d681c859ae71bddc4a2d40249260d3a9c8f7f34a7e9eb5010279aaf4","ssdeep":"","tlshash":"a8f0129a2a4c742f2913ad24fdd36c2e256e916028a759501a14ddb12c736ac93f1c7d","size":464,"data":"","first_seen":"2025-01-31T10:41:20.167782Z","last_seen":"2026-07-04T06:12:13.864889Z","times_seen":1926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/webpack-eefddb9ab913f7c6.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5fbf80233078a659363aedc26eb05c0","sha1":"8ea9f42f0b2c718449cf8b2231565092367eac8a","sha256":"ea4c138e436f126e652da0d26de235f9f5354fc2a9b9132ee68780c875bd3333","sha512":"b4b39955dd8e078c775c960c1c1a36f4025e0a6ad5c2c63eeb3a97edeb7abbfd1657f43c955fd90530826e1cfe194a875b8854381a32903aae903d2800c6a3db","ssdeep":"96:kMyYE1q9WlR3lMka20VGL6VLW56l2WRZEELDYyM:kz1mWlNfajUmYyRrhM","tlshash":"2581a7de7161f8b91782a4a1443f9446f13f28f2281ee4a0da25e4f5fc7554d8323fa9","size":4146,"data":"","first_seen":"2025-07-05T20:02:32.032846Z","last_seen":"2025-07-08T18:26:37.429257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/2117-75e95bc6d3a97fd2.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ea3db30a77daa398d15e1302f875c75","sha1":"f815f87fbf3257bb181bc04980c6e9b71f2e81d7","sha256":"910e0627398328c246392b8338a7074e03266ff173a8db30c7fa4f58f166538d","sha512":"073878ff76b85a1e434c6b7bdc242839a0d4551ae89de85819428cfde88acd564fca2d6965f44421f307a8fc5c17d3a18f928cc3f27574da33b13f01ff6471ef","ssdeep":"1536:kgwbGYZcJmYDjidl/7ss4mmN1zq5EoCv7:K7usZ41G5+z","tlshash":"d1c3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":123529,"data":"","first_seen":"2025-04-05T22:58:02.042337Z","last_seen":"2026-06-22T04:31:58.803799Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5367f9275c124ff441c9f2dda2be9a","sha1":"56f8efc747406730e680b5583b239301797b3f64","sha256":"0d653de16d82ad5663b217d4f67165a5b6d771a51a38c219689792e8566c0eb8","sha512":"c2a82168a520244bbb60a03ab8b4fbf64319ec5f6d01fbe5adc9965af8db74b0f0e0d6418e212934a9f667317e916f879cf9f096bb684d404258653708db6172","ssdeep":"","tlshash":"c1d0a78939817d1d2a136564d977086136f704a8789bbcc166209d911c333ac83a1c8c","size":226,"data":"","first_seen":"2025-03-19T10:41:28.874854Z","last_seen":"2026-07-04T06:12:13.896895Z","times_seen":1910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fbq.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","size":408,"data":"","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-08-06T04:52:41.868442Z","times_seen":27015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/twq.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","size":308,"data":"","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-08-06T04:52:41.869407Z","times_seen":27009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-06T06:21:57.680533Z","times_seen":100464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d9abcaa5e5887e2fbff3fa92f3b7563","sha1":"4276dc3f4863528a100f9ac7575061196d4abfd4","sha256":"33b24e00e382f4f2f44e0123f63d0cabad20202830b102c6783a654761265735","sha512":"48aae1a5bfdf7cb0186ed827c8bd4ef3ac03ef50ba438b367f2af460f2cb64051beea57c7daed452deb7d40daf96e5e14939080791d8ac666ead290e60d5c7cb","ssdeep":"","tlshash":"09f0ac1cf946ecaa8521844f546f1f58e1dcda6d93d484aca3adced3c610cbd5388ac4","size":446,"data":"","first_seen":"2025-05-09T22:20:49.032511Z","last_seen":"2025-08-07T03:28:50.495946Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c214c02ad9d09e0fb6bbd105176afdf6","sha1":"98a8f492a36c7ca35c66d5d9b97b8573c43d1217","sha256":"2e5e9507c0e92ab175fe3483c8046e313a9571ffb5771d99a8064442fa072426","sha512":"3024d86b3f8d6413a405371c7c17f669e66c5387b6730aba46ee866ab9dd5f627d34b87cca98cee4a9feb9f702502ba93f88fbbe2baed4c61fc80fbf109887b7","ssdeep":"","tlshash":"69f0e9abf150e4526493df0a56771e375daddc374238e858601cc5292211f7ad794d04","size":506,"data":"","first_seen":"2025-07-08T18:26:37.435541Z","last_seen":"2025-07-08T18:26:37.435541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8a6d518cbe04b7e9bd5a1027c5fd7fd","sha1":"6f2c23497bb8348808810f6c2067224c8aa48f7f","sha256":"95bce986a40e97eab589f193bdd6055e29899660e25369a4c78a197aa59810eb","sha512":"6f7056cea4a2cbdf2e7a1ffb015d8b0399f75b7a840b9fb25fbceb6b4ad701345ef89216aeb7e6c5a9267ccc888ca53dac0a30ece674c737d03fde4b0cd7fa9c","ssdeep":"","tlshash":"ab81782ea446ce4bec79fd66423f6c3054cd4a774b51deb4818dcf8582124ba3aeacc0","size":3934,"data":"","first_seen":"2025-07-08T18:26:37.436389Z","last_seen":"2025-07-08T18:26:37.436389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/8003-35d6c4e938d60f65.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8014900ea0b06de9aba6c034a95c2e68","sha1":"f5f9791bc97c1a2973734e6999868eb15e2096e1","sha256":"bb2ba96a789f1f0c6144a6d6ddba4a09c139b4060a1c9e97af56538d29415c2d","sha512":"cfa275c652a59e72983c88b3a934681c6f29ffc87c4c99ce4a55137b1f5b0cd6f011d8ea93cecdca39f82ef3f2049fdebb3465a52d80ac6887dbf2ea295ede80","ssdeep":"192:cQkUmrphg1A1ZfGVYOw/39aS2wBgrn0z9bjcjF64KGUZbczUdj:tm+EBGVo3kSicbyp9a","tlshash":"ede1e9b2b7d4fd35135a44d484378247b6542e37601e7080d3fa8cea62b8dca85e2f8d","size":7119,"data":"","first_seen":"2025-03-19T10:41:28.915816Z","last_seen":"2026-07-04T18:34:13.092418Z","times_seen":1938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2e6693b6b8e2ae5167ce7ceb21dd431","sha1":"625b83e4cdbc0bc71ca90f7de6633000d5908f96","sha256":"a87677f28d0d640a628d81e90ec37a86c6674c1c656277318f17b14c9542d045","sha512":"4a219d7524f60f77557dd49d61838d092f7517e9b0984cf2860a9638608cf848c381d9988dad5129a63b4eadf274941a786cbc08d3052715407962a6e131aead","ssdeep":"1536:tVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:lzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"b4f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172835,"data":"","first_seen":"2025-01-19T23:51:52.179106Z","last_seen":"2026-08-06T02:40:26.90273Z","times_seen":3949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/1651-960c599fa6275d0f.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57a30ec71da4c713e40bb4ba403cc382","sha1":"28d00cbd7ec368a814b3fd22ac96c25d6e63bdc5","sha256":"c8f94895d36b5c7fe75de642609ae65297f1f734c90be9fa8a06c9704cbbf38d","sha512":"c1fe42b1ed2378c525e15f13b87290e901399811acc2ce3d7596dde754a7adbe85a42b90c4a1020c79088ceb41c0b8fa956798c0953bce2fc2f5875e9efb08e0","ssdeep":"192:Rm72zK2HAWKkOkJKRqdNDemPU9fDdYuZD7xn2c33/BLuOVFK8CHLjCPsTetE8F9n:R4BkJKRqdNDemc9fDdpZD73vBLuOVFKU","tlshash":"673273f5e3e8e7d09a2d8ba151daa01f727f2b94ab164c54f8682c14e4548dd3b40ec6","size":11569,"data":"","first_seen":"2025-06-14T04:20:23.615817Z","last_seen":"2025-07-25T12:10:25.693022Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/app/(landing)/page-1e1e95bb992002f2.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00f581ab6b3ba4d53e971b431f3d56e3","sha1":"fae5088e4b4fd764dde98a05b5f28a70caef25f5","sha256":"9453d067eb2e0b36c16c90060524bb0ccaed5aaeff960fe196c16383c63604ed","sha512":"12bf41b0e9ad3a3a95b0fb26d60d7947986687c601a74513f54ac71b0b1efb1cf619f240f6fda2ac36564d1933f39e1f24f7786a1bb610f4cc2c3c4a818d2b34","ssdeep":"384:H05TORjtjsHzT7phmT6qKvXv5LD5nP1vqLzxtJbZOA:PRjtj+9ZbvXv5LDp1vq5tZZOA","tlshash":"0e827419f149e6e8fab20c64962fc449722e364ccb05ccf4f9bc98011a5d4d87b67bda","size":19255,"data":"","first_seen":"2025-06-02T08:03:14.512947Z","last_seen":"2025-08-07T03:28:50.460686Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/5868-49de8a8c4474e725.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1be11e1b0db235d2ee3317ef830f2a77","sha1":"29242a9660837816625daddc1b5a0a4e1c8c3e4e","sha256":"7fcf11058f9605eeb7e89ab358f3082dae4267dd2544bf3ef971f4841cdfe5c6","sha512":"38e0f9fa0092b8ae91b679b2d32ffdfe97feb61872ffef507b40158d952ff99d5aef1b80c6aaace66cfd6f36fdbeb9fff26cb08ce8be19420dffa50079c043c9","ssdeep":"768:Yr7eKJM1zEuR2ywyhZv+IcAhcJEez8KN40nLgfNEbk5a2zaoO4ta+DAY+scu:wux74gKN4cIrxW4ta+DEscu","tlshash":"aaf229ddb3d9b8d8710797989daf9409b17f22bcae458420abbcac5021248cc7756fcd","size":36943,"data":"","first_seen":"2025-07-08T18:26:37.404224Z","last_seen":"2025-07-08T18:26:37.404224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/659-0563095c51424ee6.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"915dd0e6f0873b3dde703a643b8ff666","sha1":"ae53d2846b02817d569131fdabcb0c5318eb3a56","sha256":"ec92e87e8f788a2f3f164e4a70af749f030a12c56850d06ba10cc5971cc3f4a3","sha512":"37921313e3bd8793e2756df44a0dc2e518d7c3274a6a8cde23e80358a1a607d6aa1db0c4509a43de95872a1bb83063246d2417d673b0bc1f69e39a2a569b3f83","ssdeep":"384:UzMWv91E0kbfrt42FPpXAhO8EQyXmP7TivCOqX3rXWXvX4r9gYxRxPzr0rg:BWvHjkbfPPpXC7yXgTpRXbXWXvX4r9gG","tlshash":"4372f9ec63f468e879475fb4c52f640eb13b257e6e4680d8b6b8acb066141e87702fc4","size":16885,"data":"","first_seen":"2025-06-02T08:03:14.534445Z","last_seen":"2025-08-11T12:35:45.420575Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/9157-1ba04d5623695b43.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07df211aa09f7a327fd8f7536b1f0f1","sha1":"5e3565273ec641ac5cfd756f5a472cab88fb2fbf","sha256":"c9a61872f0519908e071b9a59fef73f722cfd24c6b3b2800b82a5d8edef6705a","sha512":"b80ff42d0aa35f0e369978332f8517e7e0b2562857f29ea136f000a5d64b77e978245dcff3bd007fe982155e6dc27fd13c7fcc3c65ee7a7faa1d76ab32d8462a","ssdeep":"3072:fexL57gsIi4o2r5pCJfqeaaUxWUQwA+SPg:fsLisv4dQJfN+WpTdg","tlshash":"45f307ad7115b02d4ab31abb40bf5807a87817361c0dc8b0e354f99e91fdad9616bfe0","size":159124,"data":"","first_seen":"2025-04-05T22:58:02.07516Z","last_seen":"2026-07-04T06:12:13.818695Z","times_seen":1908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c8bc6be52cb8cb702af790fca65bbbc","sha1":"81146c7470a403854a018eca7f5d85169963ff5f","sha256":"da2dd21dc2641e2199704ebfdf4d8792f8ef819a26918a75a8a3a773d21cefa5","sha512":"cb482221358154d11c584321f9edba8ea8cd8f943936fc522a7df53cff6f36a9813ac68dace7485769c066dc333a29eec14b648925c1d9326b886304f7876ce5","ssdeep":"","tlshash":"8011ed6aac11dc09da93df1a483f1d3796dcc6ba0359e609e94cc9380502d3d1be8d42","size":1011,"data":"","first_seen":"2025-07-08T18:26:37.437135Z","last_seen":"2025-07-08T18:26:37.437135Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"oreswap.com/new/landing/block1Bg.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block1Bg.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"5f7e-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPqz343t9IAqtk5%2BIH1jAVm5IY9lJuIooRodboZFeAMlFZ%2FGlFtns7KAo6niME5iWTh35xtd%2F2OqPOGmmhrXQMo5zJqe%2FI9%2Flg%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eb556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1450x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43ecadeebe099275233f25da3d5d7b25","sha1":"939a8734db86195892ca05078d12bcc5ab0cbedc","sha256":"64cc10e9de9290364654d6f2387eb1333e22f59931d05f9d3626102670f1eea3","sha512":"5fce11cf8cbe35686f74fdd583e82e36c0b4b77ba93dfae8aa271c53b5053de2835ef590303a8f2cbee110605c629d5bae3e1aafe41f86df5422f9c462f41ff8","ssdeep":"384:quk8HyH7AkmJKGiqN6ABdtGFAvUNnReYGzdFocLkHVkKNBJuLi:i8SH7Wz66nGganReBZicw1kcBUe","tlshash":"bab2e115ddcd8d28a650a474095bf1063a9788e21fe5ffe898893010a7cdef4f6a4bd3","first_seen":"2025-01-31T10:41:20.113549Z","last_seen":"2026-07-04T06:12:13.907731Z","times_seen":1914,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/block3Bg.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block3Bg.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"7ce0-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2F5BCp6VyH%2FczS4vsEJOYZ%2BbJAYYFf%2FWnLd80SjhudV4ouxV7qXvcoLGdZotUPVKg0VR67%2FjnYgQZffw7RgH60U4npDfM96r5Q%3D%3D\"}]}\r\ncf-ray: 95c1a0e7bedf56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e48516d30fc0185a62d4d44782d7114","sha1":"8c8de6204cf95cb371c8181dfa68609b82874802","sha256":"9f65b5f84da360952bf621b40cb8c01719e3d66f386154fe73122a06eed3e5f9","sha512":"ac57b94a1412db4893f4cc5bbb7208be9d486d6cd3acf70ea19630ba10b129f53abaf058878b5eb7b4a1e64ea87bc0d845fc268decd470e1fd789a206ea1b08c","ssdeep":"768:Yq/RYKrxOSBsYeXstjo3Tac9jHQna6yFw4OoxkEg1nTRo0msG0:Yq/RYYwmeXsO3BjODy+4OmkEuTRFFv","tlshash":"bce2e1453b945006d1eba9ac050fcced827a5ceb8a6f5427fd161a94cb3b220e7028db","first_seen":"2025-01-31T10:41:20.127884Z","last_seen":"2026-07-04T06:12:13.855978Z","times_seen":1919,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fonts/ttnorms/TTNorms-ExtraBoldItalic.woff","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /fonts/ttnorms/TTNorms-ExtraBoldItalic.woff HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:12 GMT\r\ncontent-type: font/woff\r\ncontent-length: 34680\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3h0HbPF8piaiA5T%2FaSKUsZ9m2iUNCrHCF1tpWeWbcw%2BO%2FUtAFtb9p3%2Fp3d1RYm2Hz2LsHbnJGbNeAlh6Nojj12J3eaEv9i7RoIVEU%2BsWma9%2FWMdDnNfjxgOz3JuXug%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"8778-1943b5f4ab5\"\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 95c1a0ebdabab512-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2780\u0026min_rtt=0\u0026rtt_var=3072\u0026sent=168\u0026recv=217\u0026lost=0\u0026retrans=0\u0026sent_bytes=27889\u0026recv_bytes=13750\u0026delivery_rate=1216286\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1311\u0026inflight_dur=126\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34680,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 34680, version 0.0","md5":"9a30e8f0dd95fceaa89cf08605ea7236","sha1":"1d44d7d9c95c173576f844b081ce9300873099cd","sha256":"8adb6b1b4270089cb85b970e5f1a9dafa6187d864534bb55a3f9775b4b957528","sha512":"86994026ded042339e8157d7420f31e3757dbe6681b3a49464e0b5a4c09c77e6be757aba86c2045d66b72cd9f03580cedc452f178ba794ff2637eb4e0f5d2f26","ssdeep":"768:nllcp5nxgKPVOT79IHkwzRYyQSL0tSBf5BFkqY1Fzd9:nll+yW0m1Qs0q57YR9","tlshash":"eff2f1729d657d209249a579f0fa0e9c1ac8732a7133c34a973eba39714bd70b03761e","first_seen":"2023-11-04T05:15:18Z","last_seen":"2026-07-04T06:12:13.856771Z","times_seen":1908,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/custom/the_dog_house.svg","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/custom/the_dog_house.svg HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 06 Mar 2025 13:31:53 GMT\r\netag: W/\"3e2-1956ba7cc98\"\r\nvary: Accept-Encoding\r\nx-cast-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVcVop7RItlKPKQh8y6Gcay1fjh05941S4wIkw4jMTOBPVghiRwsjzzoPA9ZSkvoxBKKQnMUexYGrYBbgni55ZmOXH3DXIVyVg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: 95c1a0e71dd756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":994,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa5012337beff7637333f85da7981a62","sha1":"f3418a1bb880cc2d9cd66db292d3012ffd07b8a1","sha256":"0f1c3cac5b788556186c3072de0eed4f19b3c4602932feeafce8f6d29149892b","sha512":"a1158d53b56c629a60183ec52e3a32495025b9d04d7255e687f45ef8c19493e66b1d2db84f5ce2148bd1e2d452813f3676d60a311d8d283ff27581478495279e","ssdeep":"","tlshash":"f911100850fc4114890823b52b58e576af2724db46588228f4dd27e1a70447bdab7cc6","first_seen":"2025-06-29T02:27:40.572306Z","last_seen":"2026-01-11T19:50:39.073936Z","times_seen":40,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/css/8608792f3b5f7f74.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/css/8608792f3b5f7f74.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: 95c1a0e73e0056a5-OSL\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 24 Jun 2025 14:33:42 GMT\r\netag: W/\"2150-197a25bea0a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: HIT\r\nage: 534453\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=z35kORN6MKIcYr8dcYDJ1G5CGsKJ%2B3uCoqOA6arf%2FIDbd8Tx56mevWUuFh63SqNKbQABG2D5cJY3mQDgKWAVk%2FR%2Fhbxvyxw0iyjTDJY8dExW4oPhxWMXEXJH6fdrYg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1822\u0026min_rtt=417\u0026rtt_var=1749\u0026sent=165\u0026recv=59\u0026lost=0\u0026retrans=2\u0026sent_bytes=172007\u0026recv_bytes=2876\u0026delivery_rate=39691370\u0026cwnd=258\u0026unsent_bytes=0\u0026cid=e2c07e083bb217e4\u0026ts=743\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8528,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (8528), with no line terminators","md5":"f6eea2c332af5e9f6c1a95b382e645e9","sha1":"8826e8c79885c8a1b68061395c9cd8ff2bdc4074","sha256":"23bc36de0472509a2d230a105eaa19f08784668e62510939c78a5876636459ff","sha512":"0fee41acdb39d98cdca39cdb926a59605434fda64ae76e07b9895669b1436e88864f6566b10cdff7f37d7030bbac23bc2b785e31cb787563d3a4e80aac90af35","ssdeep":"192:ynKRX2SKRFg4kik8Ux08RY3/RwGuR+phRvN1uhmYwRzMERP+AYRYcURiNLjRk7Tc:mwMIPhBFiodUWUcra2Es","tlshash":"94020b7fd13960b82ae57cb5914c51093423ca02d7b763cfb788f93ad1ca1b925a3798","first_seen":"2025-03-19T10:41:28.878153Z","last_seen":"2025-08-22T23:57:26.156034Z","times_seen":413,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/main-app-df523c8931f70c0a.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/main-app-df523c8931f70c0a.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Jul 2025 07:30:50 GMT\r\netag: W/\"1d0-197cf320373\"\r\nvary: Accept-Encoding\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\nage: 435390\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2zvD0G%2BD1rIf2b3U%2F9yYAcora%2FJ7zyESl2zNfcARtthh3WMqAjnsVFUEtxjJ4b3L40EVYWLHPWb%2FST9nxogcdGXZNj5wE%2F2NA%3D%3D\"}]}\r\ncf-ray: 95c1a0e76e5156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":464,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (464), with no line terminators","md5":"780f1f062143f470ccc751e8e9d0ba05","sha1":"c9deba27d87d3e1b411b741a1d7249479fe500b5","sha256":"82b916c2ff6e9ac8cdc115f596700aff44c67c4cb3fcae2c6dad80a6baab40fa","sha512":"77205548712b78834d6277e82f573ab652162e8daee458234ee877477cb98410450a7465d681c859ae71bddc4a2d40249260d3a9c8f7f34a7e9eb5010279aaf4","ssdeep":"","tlshash":"a8f0129a2a4c742f2913ad24fdd36c2e256e916028a759501a14ddb12c736ac93f1c7d","first_seen":"2025-01-31T10:41:20.167782Z","last_seen":"2026-07-04T06:12:13.864889Z","times_seen":1926,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/block5Mobile.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block5Mobile.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"52e4-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHV4gcRzqP1YMhvR60UdkhQbA5rStAxWH3Tdxpk66AwRfx5U7%2BlNjbrNJ4ek0fUrszo%2BsSHjAXYJm%2B75QyKVnj1Ci0ol9H%2FONQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e7bef356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c7fe573ca47cd563c79920b4f9c262e","sha1":"d33337fe8dd023420e98e164d3744679898c5e1a","sha256":"597c551769acbbb8aac81167c78718c2fac6dde65952a7a7b2925d38ba0f87dc","sha512":"c778e0c020face244b2c2c246513ae0565aa5d9773607ff4e8c8eef27cf966a215ba4682c1fb68e08fedc45dc19e846c6bef2ae37d5bba254f9dcc7b5016d310","ssdeep":"384:kkI81KBET/Me6fMz1KPRqcjLWxDOPeaj5CQnHqErz5CVKYG5njHibBynqnk0U+fL:LI813/MVfMBKP8cPWxAn1HPIVBG9HKyM","tlshash":"6c92d0bd4889c9f4a0ebdc27e80d7ba2484cc7ad270b6a44d2db60ccb77218ba55d515","first_seen":"2025-01-31T10:41:20.133561Z","last_seen":"2026-07-04T06:12:13.883194Z","times_seen":1917,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fonts/inter/stylesheet.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /fonts/inter/stylesheet.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/_next/static/css/f89cf37e5720cb55.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:12 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OpjYB2Ho9%2FKhITHqs3dcr1v1yFStuFNrRabOiOEyO1ycPxapVIvqg87QJoov4Dl%2B53T%2BeeUhxxtc2fPmDQKlm2w%2F1TxwZW1gGCZclXlvzTziIC4nmJeB2iLGq5mWiQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"18a7-1943b5f4ab1\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: HIT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 95c1a0ea5aa0b512-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4044\u0026min_rtt=535\u0026rtt_var=3754\u0026sent=153\u0026recv=209\u0026lost=0\u0026retrans=0\u0026sent_bytes=13827\u0026recv_bytes=12191\u0026delivery_rate=356908\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1027\u0026inflight_dur=65\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6311,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"bdf5a025fbabbaa5d6f4abca1d0e67aa","sha1":"b039f5f4911a96afdeaa786c89b2ade709bb5956","sha256":"fb1c3b9832b8b6cc300b0da8665955e7c05f63dae8fe6cd820b351eb79cacaaa","sha512":"f60a3be9a436983aa7a177212c288adfe920b42c2fd7705078126dcbbba7a20568829befa5db029d292fb75d9415c51c39fc449d3912c69d99d101f49b24653d","ssdeep":"192:HXKHXeXYwPXZXpXFwwX6X4XGwFXfXjX7wKXAXyXkwrX1XdXxwsXWXMXCwtX7X3X8:HXKHXeXYaXZXpXFhX6X4XGMXfXjX7fXE","tlshash":"56d14203067f2e11364148593f9e9a77fd7c188a72a611a6b579a2504df3c93c3cdf4a","first_seen":"2025-04-11T21:37:07.815034Z","last_seen":"2025-08-22T23:57:26.242588Z","times_seen":393,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fonts/source-sans-3/stylesheet.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /fonts/source-sans-3/stylesheet.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/_next/static/css/f89cf37e5720cb55.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:12 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K9VSG8AzwpmVgqHfW%2FK4UlLDbVXcZBkNrLUCtPWDE%2BsIbxXl5E6J%2BPiGhteC8DMtC4h0nP5iTXY4eyGXfz9m4HjB3Rbg96RZr5%2Fvu5R%2B1ZfUf%2BNnIn2sZBoUrpvPbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"290-1943b5f4ab5\"\r\nvary: Accept-Encoding\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 95c1a0ea5aa1b512-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4044\u0026min_rtt=535\u0026rtt_var=3754\u0026sent=152\u0026recv=209\u0026lost=0\u0026retrans=0\u0026sent_bytes=12714\u0026recv_bytes=12191\u0026delivery_rate=356908\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1021\u0026inflight_dur=65\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":656,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"6ce52493af310d12e72f2ad2530edff1","sha1":"b63019c9de65d20c5bd68f2506ebc6945d93610c","sha256":"90f72aaf12432622c732eb030a37c0d97b80368c13bb14f1184ff06332d3b868","sha512":"34956a26d391f2392f97d16ed2c1dffbaeac814c1235172c9ef2898be74926e7d6405ec77156e78b27b1e31e214cbc0f50f0dd6b4a46b5aec61d1e61afa0cb5d","ssdeep":"","tlshash":"def09923426a1a7072204948bf5ee563be7c0807b3e241baf53452004db2d1943cdf8e","first_seen":"2025-02-12T05:51:02.639954Z","last_seen":"2025-08-22T23:57:26.168522Z","times_seen":403,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-da5caefe92cdbb5c.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 04 Jul 2025 23:38:23 GMT\r\netag: W/\"2a323-197d7ce3162\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 271860\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDxqVL6VR6X97lB6NGdI9HedmW%2FU2%2BHVVeg9aiyR7Uy5i7IscwcANMm2vw3jbT%2BfQ23wnEKuazUfWsDJC8VHCxhtE5KdTzEjwg%3D%3D\"}]}\r\ncf-ray: 95c1a0e76e4956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":172835,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a2e6693b6b8e2ae5167ce7ceb21dd431","sha1":"625b83e4cdbc0bc71ca90f7de6633000d5908f96","sha256":"a87677f28d0d640a628d81e90ec37a86c6674c1c656277318f17b14c9542d045","sha512":"4a219d7524f60f77557dd49d61838d092f7517e9b0984cf2860a9638608cf848c381d9988dad5129a63b4eadf274941a786cbc08d3052715407962a6e131aead","ssdeep":"1536:tVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:lzug758kkEiXjOAprX2wd5WjguGOK","tlshash":"b4f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-19T23:51:52.179106Z","last_seen":"2026-08-06T02:40:26.90273Z","times_seen":3949,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fbq.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /fbq.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"198-1943b5f4aa9\"\r\nvary: Accept-Encoding\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdxSpmm83FLokuD%2BafJrtU8U5qS4PrjCcN0SMsqnYdWdUMry4Zj8cPuWou3Wod8E77RdGkUft3naBuvlO6UjTIO9egQdjcM6vw%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eb056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":408,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-08-06T04:52:41.868442Z","times_seen":27015,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/block2_1.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block2_1.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"8a08-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6MBVi3lRAosviO%2FmbZeRUzazU9ebQNjO5boUcBV0Ub3FQZu%2BXHBWZtA%2BGNAquCeeTj4jxrO8qEGZnaTKQMruuHYVEvZWoYJ3w%3D%3D\"}]}\r\ncf-ray: 95c1a0e7aec556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27af9080beb8306cddacd1a9037925bc","sha1":"be2a7157460eb6ecec53392c3a0a4b403e86ff48","sha256":"64f67f85d1e3bbdf632351a794605b742e8293f29c762897dcf855ecbcda6d4b","sha512":"6451167d859df5e5eb343f48239026bb35a46a2e6f25cc47bee910ddbc949a37772d5322a27dcc73e8ffd8e534d868653b83d9e0355f9fdb2e703d2b1f651db4","ssdeep":"768:Y5AgxlJUP/BLpP+9ejuyf89L6LrzRH2N/O3jeCZ+EPvxrT6x5w3UBIXl:SAgxlJUXB9mCuyf89QH2N/QeCZnHxrTj","tlshash":"6bf2f1985019152ae3524e25d298752267c7dfec17f0b221de90dfe852f11ee30aface","first_seen":"2025-01-31T10:41:20.160976Z","last_seen":"2026-07-04T06:12:13.902579Z","times_seen":1916,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/custom/the_dog_house.jpg","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/custom/the_dog_house.jpg HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 159516\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 06 Mar 2025 13:31:53 GMT\r\netag: W/\"26f1c-1956ba7cc98\"\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNTyiwXem3Onv2PYd1nK4QQQGbN3i%2BKoIWIC7cmc0uxHUA0J0US2qYN%2FmRnr1cBYvNmT4sqyiIXWyTeMt87C21iXxJtd%2F1bcBg%3D%3D\"}]}\r\ncf-ray: 95c1a0e7cf0156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159516,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"774a76bf700320be3e8aa1d1e62f27fc","sha1":"a8e2dbe2c23c825d7f019ddf309886a51bb3966d","sha256":"834f694de6556aa601813b00b2aeba35a4f90c1f0a887305ae5db12e4dae6f72","sha512":"f79050ebcff51ebd8a675718dc03a221ac4369700231f6a13d1c56e95b7f301678089250fefb75d8eda396129a44d40ee6976873d2087f4b5b87c90b56991af8","ssdeep":"3072:ecAsu9jvRGCbsXR9i4PmEQHrmF4nzD6CBzjeH8mel8Xdo:q1Ehh91eEQHKF0D6CBt+C","tlshash":"47f31283671814a8dae955750a39a7cbe763497cd8a730ca80700db5ac30b773d87f89","first_seen":"2025-06-29T02:27:40.560239Z","last_seen":"2026-01-11T19:50:39.106232Z","times_seen":40,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/5868-49de8a8c4474e725.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/5868-49de8a8c4474e725.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 08 Jul 2025 00:43:11 GMT\r\netag: W/\"904f-197e77c9745\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 5261\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9p9W9ghJ9eK75x2YL%2FPWukIyjXERAfyiuhgBYs2EYYAtEXVSUofrMib6EG2WKrBcjs%2FMP2PmVhPf74MD5zFtm9MNYsIHhMHgQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e79ea756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36943,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36943), with no line terminators","md5":"1be11e1b0db235d2ee3317ef830f2a77","sha1":"29242a9660837816625daddc1b5a0a4e1c8c3e4e","sha256":"7fcf11058f9605eeb7e89ab358f3082dae4267dd2544bf3ef971f4841cdfe5c6","sha512":"38e0f9fa0092b8ae91b679b2d32ffdfe97feb61872ffef507b40158d952ff99d5aef1b80c6aaace66cfd6f36fdbeb9fff26cb08ce8be19420dffa50079c043c9","ssdeep":"768:Yr7eKJM1zEuR2ywyhZv+IcAhcJEez8KN40nLgfNEbk5a2zaoO4ta+DAY+scu:wux74gKN4cIrxW4ta+DEscu","tlshash":"aaf229ddb3d9b8d8710797989daf9409b17f22bcae458420abbcac5021248cc7756fcd","first_seen":"2025-07-08T18:26:37.404224Z","last_seen":"2025-07-08T18:26:37.404224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fonts/ttnorms/TTNorms-Bold.woff","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /fonts/ttnorms/TTNorms-Bold.woff HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:12 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31356\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JfUHvARrgiQxKZGk%2BU3dl%2Bm4Iiq3EK%2B4c6zT1ZB5OsWSF7NqkARqk%2BA4gJdG93ThzN4J5mJswX9NKCHYaMBUk6KzzOs8OUViUVl1T3Usp1Ay1l0I8UqB2fZE%2BZgCCg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"7a7c-1943b5f4ab5\"\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 95c1a0ebdab9b512-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3539\u0026min_rtt=0\u0026rtt_var=3124\u0026sent=164\u0026recv=215\u0026lost=0\u0026retrans=0\u0026sent_bytes=22289\u0026recv_bytes=13662\u0026delivery_rate=973028\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1308\u0026inflight_dur=122\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31356,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31356, version 0.0","md5":"1009f03324315eb8bb66d610775afe82","sha1":"0f23bd1f8f9cefd55d70e8adc0630cef4c17ca52","sha256":"9e710930d6b03e68bdc6ba959f0d2c887130bfb798396be23a681052a65dac08","sha512":"aa49efbd3abbf9f1725d374df9cf78c265404df78b7559403ee63e87d753156cb5c29b7c12a464db02984c2c487a680556ce95d3e4f549faf2aaa8963c6513bd","ssdeep":"384:yDE5sruZZalQZm8rBdPelcvyApojd2CijOognqC1paaHxOpS8q3YuqvHd3nbTTzY:bZoSZm4zm6j3ZfD+B9M93TY+oc/s","tlshash":"7be2e0eced1fe7a38314c5ef11354e2b137429c7701bc78986289555eca61b2bd31513","first_seen":"2023-05-07T16:06:45Z","last_seen":"2026-07-04T06:12:13.822703Z","times_seen":1960,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/block3Bg2.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block3Bg2.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"a50e-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vL63phODhs0ON4Gp3uYaKrQhUu0YfOHq1DrfFgj3M6jjHNjVCu4JxJd%2FL8toYzfWfSwex%2FfmT7Yhmvm4UgCl0uOzwS8fIKz%2FSA%3D%3D\"}]}\r\ncf-ray: 95c1a0e7bee356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d478c3f4a716990ed217e6ace31734d3","sha1":"c773fb06a91834dfa0874a7ac02e1ed063709706","sha256":"5111eb0ea2e9c86e8f4c57da58821b50781c345eeb65a397dfe10799f34c21f2","sha512":"d1844b16ad017ca258c943cef26e6c2125b94dcc9bfc3a62a13e83a8ebe510230d9531a156df6da080597b6697bcca10ee75912ba7378e17c4266f5b9f5aa047","ssdeep":"768:W62xl5LOCUFdXVdS1z0zfs8ulIjL82K7usf6571t0lfk3dRGtrOOdTONmk5T4LHP:Wtnqvdmubs8u6jL8Tusf6Z0l+wJwNmBz","tlshash":"0d13f1b13d4b9594bc7c444cef80074f9acc66ed9182dc67c1ae68f1a789ca84a309f4","first_seen":"2025-01-31T10:41:20.124542Z","last_seen":"2026-07-04T06:12:13.82397Z","times_seen":1917,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/block5BgMobile.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block5BgMobile.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"bfb2-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q5IL%2BNJpMweMQZb36oqpHCUpO%2BOWNSu7VLTqdTNhXU1KZQgTI%2Bde105kfp%2FhODlDeOjYP%2B6J8Gimodh%2FEdPwSl6zJRuTewKYiQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e7bef056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ce596f2875175161c32cc277e495175","sha1":"de336df23f662cb35e35030d7ac43105fd6f75af","sha256":"3f6626eb2f59ea9fc3a1297d7fb2aa365f5270f0ae3a84586a3eca83dd243ec1","sha512":"25e128edd7574d76ca34e04f30b86cede5efb8b27d4a257898577a96295100dbefd4f3de5ce2d6afb9913c3532ca24bac90e60e90bf926b2d50b9ba7b0f8b02f","ssdeep":"768:hsWhVWv4Ru5NV5dm4vdWHe7GtiCzAoQegljsVNRiKIds4bTyNnu5UBLJEzxTX3:J44ANVP/10GKbQeaj2NRFIKBLJkFX3","tlshash":"752301a0ce99f00b89649520f529ebe62e7147cd8f9cd71a188cd07465faa1fd0b4f83","first_seen":"2025-01-31T10:41:20.132022Z","last_seen":"2026-07-04T06:12:13.915503Z","times_seen":1915,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fonts/ttnorms/TTNorms-Regular.woff","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /fonts/ttnorms/TTNorms-Regular.woff HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:12 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31112\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uwB5SOOFNu3mR3nW7g9FA%2BGEr%2FM6QaD49C5c39RFv9NtPlgl5794xBZOU0KN1dnxkLMIrjq7J1iPBVM%2F1Qkdy6gliOM3SbWQrnHSDPALjSDIQvtQ%2BpvaBrB4mtQG%2BQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"7988-1943b5f4abd\"\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 95c1a0ebdab7b512-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3134\u0026min_rtt=0\u0026rtt_var=3154\u0026sent=166\u0026recv=216\u0026lost=0\u0026retrans=0\u0026sent_bytes=25089\u0026recv_bytes=13706\u0026delivery_rate=1216286\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1309\u0026inflight_dur=123\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31112,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31112, version 0.0","md5":"33f150c6ac81219f18b55864e087dd12","sha1":"7e3f9fee0b08c64fd733aaf64029c2947130b9a3","sha256":"0d9f772dcc9cd484c98410488a12c0865b31531a79e8e9c1926945e7b5e66a95","sha512":"d014e3e7ea7dbe8f123c1cc9fed70c6b8ab5cb65703fa2d04814c640c07521b94175c5830eafe01b67c73881a9a1f374231279a75285ac9a4e62b32ab0158139","ssdeep":"768:MA2xVa+8iyIHNUTmc5XZ5x39iaKiR6TMYB+qOk:MA2vz8N5TmwZ79ZptY+k","tlshash":"aed2f18f626c12dcf970e4fea2e217cd8745347de13a4665c646d0cfca61e70ed88219","first_seen":"2023-05-07T16:06:45Z","last_seen":"2026-07-04T06:12:13.863507Z","times_seen":1962,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/8003-35d6c4e938d60f65.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/8003-35d6c4e938d60f65.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 08 Jul 2025 00:43:11 GMT\r\netag: W/\"1bcf-197e77c9745\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 5261\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tji9uKRZ4jCOq39A%2Fxvcgxqpobp%2BHPHVJpWlPqmvYJzLya34ijmJ3ARdtD5R%2BnJxMqWH%2BjlRZervM8TW8kvk1SoE7imPT45clg%3D%3D\"}]}\r\ncf-ray: 95c1a0e76e5356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7119,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7119), with no line terminators","md5":"8014900ea0b06de9aba6c034a95c2e68","sha1":"f5f9791bc97c1a2973734e6999868eb15e2096e1","sha256":"bb2ba96a789f1f0c6144a6d6ddba4a09c139b4060a1c9e97af56538d29415c2d","sha512":"cfa275c652a59e72983c88b3a934681c6f29ffc87c4c99ce4a55137b1f5b0cd6f011d8ea93cecdca39f82ef3f2049fdebb3465a52d80ac6887dbf2ea295ede80","ssdeep":"192:cQkUmrphg1A1ZfGVYOw/39aS2wBgrn0z9bjcjF64KGUZbczUdj:tm+EBGVo3kSicbyp9a","tlshash":"ede1e9b2b7d4fd35135a44d484378247b6542e37601e7080d3fa8cea62b8dca85e2f8d","first_seen":"2025-03-19T10:41:28.915816Z","last_seen":"2026-07-04T18:34:13.092418Z","times_seen":1938,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/1651-960c599fa6275d0f.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/1651-960c599fa6275d0f.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 04 Jul 2025 23:38:23 GMT\r\netag: W/\"2d31-197d7ce3166\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 271860\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iz65t25wceapheZB3gU4L55RZwTsFlPlW2qWPiFtsvuyrNJqhIjMXwhQZsKz%2FoDtvbzUG8IWcBQRnj1B5Oj5d9r4G47jAyOS1g%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eae56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11569,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11569), with no line terminators","md5":"57a30ec71da4c713e40bb4ba403cc382","sha1":"28d00cbd7ec368a814b3fd22ac96c25d6e63bdc5","sha256":"c8f94895d36b5c7fe75de642609ae65297f1f734c90be9fa8a06c9704cbbf38d","sha512":"c1fe42b1ed2378c525e15f13b87290e901399811acc2ce3d7596dde754a7adbe85a42b90c4a1020c79088ceb41c0b8fa956798c0953bce2fc2f5875e9efb08e0","ssdeep":"192:Rm72zK2HAWKkOkJKRqdNDemPU9fDdYuZD7xn2c33/BLuOVFK8CHLjCPsTetE8F9n:R4BkJKRqdNDemc9fDdpZD73vBLuOVFKU","tlshash":"673273f5e3e8e7d09a2d8ba151daa01f727f2b94ab164c54f8682c14e4548dd3b40ec6","first_seen":"2025-06-14T04:20:23.615817Z","last_seen":"2025-07-25T12:10:25.693022Z","times_seen":19,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/app/global-error-fe201d1ef534f112.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/app/global-error-fe201d1ef534f112.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 24 Jun 2025 14:33:42 GMT\r\netag: W/\"56c-197a25bea02\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: HIT\r\nage: 534453\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAB%2FTwpVerly8xu6rNTRTr25vCJifK1Lijc%2FUheYLUV4Sr7pYywEGHtYq6oFYS1cS9OvD7es5%2B9zeSI3qZCwtI7nfCpf52YRSw%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eaa56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1388,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1388), with no line terminators","md5":"8ca48ed0d2a1a5682754bac07d67d8fd","sha1":"7c9f9f86aee10c66b96aa5ef12159df0e36f0cf9","sha256":"a70d13ae98e69275eac6f58c2d6aa8036ace599fc4e72660df186ad6127acc9b","sha512":"6be3f50c376712f38eb378071c6eea9f636580b4e9fb92961b47cbdf5ce8fe90f358f92d7deb99c30915b67e0c842f325edb93562fc33d57df1bfd1ede4c6b03","ssdeep":"","tlshash":"6c21118db0817994665ba8de926f940d719b259d100e2cb3d9716cb01c663dcb903fcd","first_seen":"2025-05-09T22:20:49.02016Z","last_seen":"2025-08-22T23:57:26.217164Z","times_seen":393,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/659-0563095c51424ee6.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/659-0563095c51424ee6.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Jul 2025 07:30:50 GMT\r\netag: W/\"41f5-197cf320377\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: HIT\r\nage: 435390\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPWnQwtNaM02YJ4AKyfaMhNWexMOY8kv067ScA8LnfvCZNQsSuUj%2FYCGfsbMJFmLpJuQTKnTus2IUg91u58ymxdDjcWCeOvbIQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eab56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16885,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16885), with no line terminators","md5":"915dd0e6f0873b3dde703a643b8ff666","sha1":"ae53d2846b02817d569131fdabcb0c5318eb3a56","sha256":"ec92e87e8f788a2f3f164e4a70af749f030a12c56850d06ba10cc5971cc3f4a3","sha512":"37921313e3bd8793e2756df44a0dc2e518d7c3274a6a8cde23e80358a1a607d6aa1db0c4509a43de95872a1bb83063246d2417d673b0bc1f69e39a2a569b3f83","ssdeep":"384:UzMWv91E0kbfrt42FPpXAhO8EQyXmP7TivCOqX3rXWXvX4r9gYxRxPzr0rg:BWvHjkbfPPpXC7yXgTpRXbXWXvX4r9gG","tlshash":"4372f9ec63f468e879475fb4c52f640eb13b257e6e4680d8b6b8acb066141e87702fc4","first_seen":"2025-06-02T08:03:14.534445Z","last_seen":"2025-08-11T12:35:45.420575Z","times_seen":37,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/block2_2.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block2_2.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"e896-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eAnO8BBzKsG38jncYMz%2B96oqltjIr93ktflxiOsMCxCd2R6mnYKL1hNDXA0QyPOtEpSkD8p8awyOrx6zXNz4R0Nf6hxGUACUkQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e7aec656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e84373a6466299fa094ba5363b7b5611","sha1":"b664588840cddc484127d918b9e723a7150ae1fd","sha256":"e40b65c3cb0a0765e299a82e05a7b5e093eea9997af4d8f09338efb2e84a2ede","sha512":"1d376cef3ea264b8e514e7e14b2dab5abc77d9ee59c92a9825df43f0ac98eadc7112c0ce2a37b5bb393947dc31bdcad4a96dcf284314939a07301ac9578791bf","ssdeep":"1536:g6eq9+r8Cal3xQkiJSGZWJ2KsFMMoL4FT+5n:g659I03xQkwUJ2K6Mn4B+5n","tlshash":"db4301a2dbd65305efbf4f8e2163161d586f842a37c3676d4829a84a33185f11bf4b0e","first_seen":"2025-01-31T10:41:20.12249Z","last_seen":"2026-07-04T06:12:13.820402Z","times_seen":1920,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/block5Bg.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block5Bg.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"d128-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDDU%2BCx2oTKO0%2B1%2Fqih95FG%2BYHmi6%2FgPWWgn89T1HrbdcGKIruKs32ZIEDyPZyH%2FijooIZHrR2ianATlffvJPek3lpbR0jIXYA%3D%3D\"}]}\r\ncf-ray: 95c1a0e7beeb56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6d0567946b20d3f91228186c8425ade","sha1":"90e84b04c251dbbe1cfd12cd2220f07beed207f2","sha256":"5782471d28353cb1ae76e0d8463801d81bef491501aa62f3146004df0fc8ede4","sha512":"9f1b0f50c8990665ddc8d8489742eb34e13220e47977a22227dec4189fcd725fd9452c90114fab8f1a129bda2754a925c5b4a60bbe31fbf02dcc82b30b78b4f9","ssdeep":"1536:wQBneNzFJFsR1NTJ69EVl+DVj6VwVo/aA2G4Z1KL7/bY:8NNc11Vl+50wOCA2G4Z1K3jY","tlshash":"c03302c8121dac27bda99a512204cfd742b198ce5ad860b1edc0fe1af12c46ec4d5cfa","first_seen":"2025-01-31T10:41:20.129062Z","last_seen":"2026-07-04T06:12:13.836014Z","times_seen":1919,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/favicon.ico","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:13 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XzHTpk8AV3DBWSjIq67oHr4rJ5WKwwvs%2FWr8hI%2FY7d%2BLaZA2MZKzKuyqbXYzcJtjYVK2jdR1wmU9XG2ClgSkBg8Zsnic5453j76g2ofhGoNE2XgAjPskE4XqVG1j1A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"67fe-1943b5f4aa9\"\r\nvary: Accept-Encoding\r\nage: 182139\r\ncf-cache-status: STALE\r\ncontent-encoding: br\r\ncf-ray: 95c1a0ee7ae1b512-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=829\u0026min_rtt=0\u0026rtt_var=286\u0026sent=263\u0026recv=244\u0026lost=0\u0026retrans=1\u0026sent_bytes=152137\u0026recv_bytes=15624\u0026delivery_rate=3744234\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=25402\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1753\u0026inflight_dur=220\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26622,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 80x80, 32 bits/pixel","md5":"9486eedc7adbedb673e2d13ff53d694f","sha1":"593e82845889df7ac55405be300ebe67f3610694","sha256":"393a5a6dfc60be0498402043769134cce07b6a878d705d47f279b03ab9f63a80","sha512":"80c70101f26850dbe655c9f17e090a35d4085f4f099b0b3a04592b70f6932a355aa6cc586a278039ab7e922a3028221174620fb82442441b9094e90493083e1d","ssdeep":"384:WMRydD2nfzWB3BETxEf4df5t+Idxs/hqSigdz96yQ9uB9lGdNqlU4nN:WMRYynbWB3SNTPxsddJrQ9uLyNZE","tlshash":"7ec2abf6671102c5d4407ef9ab04277015f83e60b4ece7991c3bbb7503b95ee8279aa1","first_seen":"2024-12-21T08:51:41.904524Z","last_seen":"2026-07-04T06:12:13.916779Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-08T18:26:11.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding, RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ki%2Bpq1%2BeGSdvXIhJCnqRDYtdcmaFHLDe9yMa4I9osMbhFixeVyZZz1HjhhwaIrboEDZ4aHP7%2B8JkTAh3HbELXESItSP7zsGyb6dM89E2tzHRybteyOXQ3V3qZ8%2FYDw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 95c1a0e348bc56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6231\u0026min_rtt=504\u0026rtt_var=11484\u0026sent=7\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3275\u0026recv_bytes=1246\u0026delivery_rate=7688495\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=e2c07e083bb217e4\u0026ts=226\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26131,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26131), with no line terminators","md5":"51aa2b82b7d6cde02792c9a0bf528ff4","sha1":"126eb3f8ac4cf17ed3628a68c50bce84dd2e8ed9","sha256":"074914ead4add6f679e63f6485de26607db9cc3350569bf65489c297447d95ff","sha512":"da90a67eab70e07d31eceacd44be3cb76bd7a401f28a4e24a07cf6593ffbe2321cac0e7a60aa2d325a534447cf328a400fe00e8e6e04bbb5d06024da9cf544a0","ssdeep":"384:O/Z09yveKoOed0OGfDbzmvhuWhynivCOCGPBvCOC5PMexnFPspMtEdEtntmxtn:O/Z09ymKoOqKCvhuWh8tlFPeasStmD","tlshash":"9ac2d87aa1a4cdd5a9179ff4d0bd3d3f60db86ba8b1249acc15ccea0c2909fd1a55cc0","first_seen":"2025-07-08T18:26:37.415592Z","last_seen":"2025-07-08T18:26:37.415592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":47,"dns":0,"connect":1,"send":0,"wait":159,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/custom/the_dog_house_mob.jpg","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/custom/the_dog_house_mob.jpg HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 193874\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 06 Mar 2025 13:31:53 GMT\r\netag: W/\"2f552-1956ba7cc98\"\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCpJ92R4DMORoOgF0Qpit7km8ZNDN7g2Q%2BL48ErJGsJlFDQ6nYBjOgnmy3Y9Q3QzecFNkfpnfF42X%2B06oTM3HgrjNh0kOHW%2Bww%3D%3D\"}]}\r\ncf-ray: 95c1a0e71dd656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 688x634, components 3","md5":"62b430d3ab1cce0c74d9b72065d68fa7","sha1":"4ff5c2051a62cba86415c8f8d448cb5fac76c616","sha256":"6f15b8f44fac1634a7d09e9e533e2cdf62e3b29fbf8eb74ffa385146c80507be","sha512":"daa00b43a45f1b8fdcf6ddaa60e4b8e69279e914614b98615c956962ba953c1c075c4b0ca7a4e300ae7ec907c4e171bec00872dca1cdb2bba9fe6dd260080ba7","ssdeep":"3072:aZ2mQI9OcD+DO+LOV91aa2Z6tzKiFZ2Ig1gMo54eWNesd87+gmtmcchgfshKSPKf:WYI9pD+S+LOV932K7Fk1u1Wgi87+gmcs","tlshash":"4f142320b31660c8549e43bbc5c84707e3aa5d3127bd96677c7e9bb629721aff05b043","first_seen":"2025-06-29T02:27:40.557841Z","last_seen":"2026-01-11T19:50:39.112759Z","times_seen":40,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/css/33d281c8208aa46a.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/css/33d281c8208aa46a.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 08 Jul 2025 00:43:11 GMT\r\netag: W/\"a54-197e77c9749\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 5261\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCuwZ1Oqh2jSIP2AqSNZuT52GgiEYswbtTXSNl2uIzdMRnjoOjFwPEyRn2E9YwbJgdzsUuJZ8SNchU9rgv0ILQ7cfqJ6WNkWwQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e73e0656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2644,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2644), with no line terminators","md5":"9d935283d4552afa39b54bab1beea66b","sha1":"144c949c211c4280cba0fd88949206f468e1357a","sha256":"5f91900db8f97cf0c851424457aaed6b05a56fa946ef6845cdad4403375ee67c","sha512":"cd243dbbc68d1bf223f0e4121e0fe8df61b20f8fab7734eb8d5d578c8fc1967cb0a7f8db82401323b81b9a2e433371b176adf0d19d5bc734cc8cc81a999ecf31","ssdeep":"","tlshash":"50519fe3a67134b461154e536f50b76a30f487b663375a23b619ef2cb18f6d3091c24c","first_seen":"2025-01-31T10:41:20.146825Z","last_seen":"2026-07-04T06:12:13.854949Z","times_seen":1928,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/triangles.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/triangles.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"2e10-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0nu4fDnOKWAOyMysVy69HTjwYZzgKQwPc4b47NUFRrT34Smqdfqnjh%2Bkt9JqhFw93EbdSuc0lUgOhXn%2FPFZ1nJ5xJIYKTVt%2Bg%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eb356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f05371865ecf62cab6e1001717f97449","sha1":"00d6417678f2f685bfc86621c08404ce4253bd5e","sha256":"002a8352268a2601a960a8e9b0d195162969c477e0588d706db73ff7311b8ced","sha512":"9e28d757cc992746bda182ea76cafa4709ad4ab239206d68c1468d9a2fc00cf977927054ed2ea7447d69d53a876315aa767240e079e7ecedc66bff05a8556714","ssdeep":"192:6FsZYa0wgkcKoiKgstmh7AHiik445mhlOQHJqFOe2NoE0hp8W7Z5PAVMC6LA0gUW:6oYaZgkcwQ45glzRe2GE0hOW7nPAVgX8","tlshash":"2d32bf7f338274f57d2b214219359e571b71c7404be7d720c813b0b7cabb88769948a9","first_seen":"2025-01-31T10:41:20.120763Z","last_seen":"2026-07-04T06:12:13.838776Z","times_seen":1918,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fonts/ttnorms/TTNorms-Black.woff","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /fonts/ttnorms/TTNorms-Black.woff HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/fonts/ttnorms/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:12 GMT\r\ncontent-type: font/woff\r\ncontent-length: 31216\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BMYyYmk0ASqbIDWwUeKV%2F3OGvNg6UJFSwGfC4Zc3YkUrTVMbGnTupNCK3Ldum87sn1K3pBfkKs6F9to81l0r%2FQeSpXpXrtkXk%2FiO6oRKoA2Bcl5ildoKlnFrH8uk7g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"79f0-1943b5f4ab5\"\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 95c1a0ebdab8b512-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4045\u0026min_rtt=535\u0026rtt_var=2817\u0026sent=160\u0026recv=214\u0026lost=0\u0026retrans=0\u0026sent_bytes=16689\u0026recv_bytes=13618\u0026delivery_rate=356908\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1300\u0026inflight_dur=120\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31216,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31216, version 0.0","md5":"5a246f88fc7f4539fa8d90711016d1c0","sha1":"9eb704fe64bf328ada5b4fc909fc03b135e96813","sha256":"5f48c991bdc64557d6496e3e290d351881e3f10ae469fdfc332b03aca7a2ca02","sha512":"d6ac3ad66d794dd4152ff9fa3569dfd0bb7144fecaaf8d5e61eb77af07dd0d91cbc90226c9feb35a9a2d99bd1fc0af08f3d0e682357494c4267542b8f237212a","ssdeep":"384:odPYEr8Zw2sKLcrdCssSNlrHGZyeGeAyIZdF2UzFcLe0TQO97Bnihbtb3x+HoXS3:gKZp/ApeS+gebXIsLeEtBnihhbQc/a","tlshash":"71e2e1292f8e39519b99e37984ba8f357450381760358c7a4c36ad4ab03c54a3b3b96f","first_seen":"2025-01-03T03:56:47.436444Z","last_seen":"2026-06-20T19:35:05.636539Z","times_seen":1016,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/9157-1ba04d5623695b43.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/9157-1ba04d5623695b43.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Jul 2025 07:30:50 GMT\r\netag: W/\"26d94-197cf320377\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: HIT\r\nage: 435390\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKvcZ3zob3Nr%2FONQnsFw1gQfdoalSZaW94X0YtU%2FKK18P1qZhCMl3GV45aC3n%2FuncBNz98S15KIZs8zWklryrxqvIFoYyti%2BFA%3D%3D\"}]}\r\ncf-ray: 95c1a0e76e5956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159124,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d07df211aa09f7a327fd8f7536b1f0f1","sha1":"5e3565273ec641ac5cfd756f5a472cab88fb2fbf","sha256":"c9a61872f0519908e071b9a59fef73f722cfd24c6b3b2800b82a5d8edef6705a","sha512":"b80ff42d0aa35f0e369978332f8517e7e0b2562857f29ea136f000a5d64b77e978245dcff3bd007fe982155e6dc27fd13c7fcc3c65ee7a7faa1d76ab32d8462a","ssdeep":"3072:fexL57gsIi4o2r5pCJfqeaaUxWUQwA+SPg:fsLisv4dQJfN+WpTdg","tlshash":"45f307ad7115b02d4ab31abb40bf5807a87817361c0dc8b0e354f99e91fdad9616bfe0","first_seen":"2025-04-05T22:58:02.07516Z","last_seen":"2026-07-04T06:12:13.818695Z","times_seen":1908,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/app/(landing)/page-1e1e95bb992002f2.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/app/(landing)/page-1e1e95bb992002f2.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 04 Jul 2025 23:38:23 GMT\r\netag: W/\"4b37-197d7ce315e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 271860\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0H0pCQq3lyZgn39wlZRpcRtqnd5%2FXybtxT10fBWk5S6tywwHO6IFkqnaxzMMpPv9VwSHcwwQu9dvU9hPVakzZREWRH18%2BNPnZQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eaf56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19255,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19255), with no line terminators","md5":"00f581ab6b3ba4d53e971b431f3d56e3","sha1":"fae5088e4b4fd764dde98a05b5f28a70caef25f5","sha256":"9453d067eb2e0b36c16c90060524bb0ccaed5aaeff960fe196c16383c63604ed","sha512":"12bf41b0e9ad3a3a95b0fb26d60d7947986687c601a74513f54ac71b0b1efb1cf619f240f6fda2ac36564d1933f39e1f24f7786a1bb610f4cc2c3c4a818d2b34","ssdeep":"384:H05TORjtjsHzT7phmT6qKvXv5LD5nP1vqLzxtJbZOA:PRjtj+9ZbvXv5LDp1vq5tZZOA","tlshash":"0e827419f149e6e8fab20c64962fc449722e364ccb05ccf4f9bc98011a5d4d87b67bda","first_seen":"2025-06-02T08:03:14.512947Z","last_seen":"2025-08-07T03:28:50.460686Z","times_seen":388,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/land/gifts.png","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /land/gifts.png HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 39210\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"992a-1943b5f4ac1\"\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vo8G33c1I5qcisEXzKl0pXILC2MY9H%2Bpwr0d8YGfGwZetIFGIrowA92F5sytCfYtoaknAaZ8cZ%2FUER3xWxI1FQ0uBXDykatYKA%3D%3D\"}]}\r\ncf-ray: 95c1a0e7bef556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 186, 8-bit/color RGBA, non-interlaced","md5":"a28357f6c9f39f6ec64467e56d3a088f","sha1":"cb234100a21aaacf188eee7b9b42de088714cc49","sha256":"8ff0124600e50a161b28e2ca5bfe0af59aea0df8925436fe9930041b26b1082a","sha512":"de04eab9e4ef717730c25dd226941c92a7510df30eaa56454113dd543a18c70dcb4c2f7becba3ff7a6b825b754a4ba1109016fe3365b3b321a7566660fc54d93","ssdeep":"768:91k0eN4ZSFsy+dSc4Hd6WlWv2zVdYg87W+iN8Y+zsb6KFxAJwXQ9k:9W0eoy+Uc4HQQNzVdYFYAI1nt+k","tlshash":"5403f185412d4623ef2d5f86094530e0cee926bf9d49de5c427f772b0c1b6394c86a6f","first_seen":"2024-12-12T16:53:28.001894Z","last_seen":"2026-07-04T06:12:13.892081Z","times_seen":1911,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/fonts/ttnorms/stylesheet.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /fonts/ttnorms/stylesheet.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/_next/static/css/f89cf37e5720cb55.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:12 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RHHbiLoUupgaCkRaqf8hUhJw4QA67tYoTuz39NsxLjCB%2BwpSLkrBqOdFhA%2F1LaTa8eD2Hc6irPdocf%2FJmsuXGrLdD%2FtwtZvA3Kk6DZ%2FZpPLudVLS1TMuo4uOBj4Ibg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"1b47-1943b5f4abd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: HIT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 95c1a0ea5aa2b512-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4044\u0026min_rtt=535\u0026rtt_var=3754\u0026sent=154\u0026recv=209\u0026lost=0\u0026retrans=0\u0026sent_bytes=15049\u0026recv_bytes=12191\u0026delivery_rate=356908\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1066\u0026inflight_dur=71\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6983,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"13a30e1d1d98980f8d05fd08ec50bb35","sha1":"6ea5a517edd970ae8f3ac4d194c27d6bf5ff5433","sha256":"474eb22e42e75ae5cd195e8b724c0c35ac1f40bb1b6cedb21e7e7f290aa9792c","sha512":"37b23920f002d430045ab3b7686e53d56a8358ac999a9e69a7b8b25236d7a43719dfa78e8f1696bcf12a2baa947bfe660f0544aa5369c72bf70f9e65ebffe912","ssdeep":"96:hv/VbGB9pVwhoEVfaSmVtLJdV/lByoVNBhBVECGVDdqOV7BYKVzeoVhDIkV4A1xa:jyvifsv/l3N7ugC77ZhJ48DP4hBwTTq","tlshash":"bae1a7508acfb4d9e46e188d37cf5a64c60e301b2009b95bbbfde9445f6bb9e425072c","first_seen":"2025-04-11T21:37:07.818928Z","last_seen":"2026-07-04T06:12:13.925295Z","times_seen":1896,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/2117-75e95bc6d3a97fd2.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/2117-75e95bc6d3a97fd2.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 24 Jun 2025 14:33:42 GMT\r\netag: W/\"1e289-197a25bea0a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: HIT\r\nage: 534453\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJlIBj1KyaOnYB7ckWDhmpg0VVkl2iaeTWHx2XMlFixn%2Bw%2FnkDGCrHPNdI2EdbGHdhNHDyqEY2sIHX27aX%2Bf8mIdj3n1Lcdnog%3D%3D\"}]}\r\ncf-ray: 95c1a0e76e4d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123529,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8ea3db30a77daa398d15e1302f875c75","sha1":"f815f87fbf3257bb181bc04980c6e9b71f2e81d7","sha256":"910e0627398328c246392b8338a7074e03266ff173a8db30c7fa4f58f166538d","sha512":"073878ff76b85a1e434c6b7bdc242839a0d4551ae89de85819428cfde88acd564fca2d6965f44421f307a8fc5c17d3a18f928cc3f27574da33b13f01ff6471ef","ssdeep":"1536:kgwbGYZcJmYDjidl/7ss4mmN1zq5EoCv7:K7usZ41G5+z","tlshash":"d1c3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-04-05T22:58:02.042337Z","last_seen":"2026-06-22T04:31:58.803799Z","times_seen":417,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/app/(landing)/layout-ca81564ca7ab2f8a.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 08 Jul 2025 00:43:11 GMT\r\netag: W/\"e2-197e77c9741\"\r\nvary: Accept-Encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 5261\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWqWlY6RRECkotVjkRRl5Z91sic27680Vaje7ePx2B434Uvb8wZsiEocDY%2B6dg96X8uUyQnMyrT1fbudxNb4hAgIv4fWbhZScw%3D%3D\"}]}\r\ncf-ray: 95c1a0e76e5656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":226,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7a5367f9275c124ff441c9f2dda2be9a","sha1":"56f8efc747406730e680b5583b239301797b3f64","sha256":"0d653de16d82ad5663b217d4f67165a5b6d771a51a38c219689792e8566c0eb8","sha512":"c2a82168a520244bbb60a03ab8b4fbf64319ec5f6d01fbe5adc9965af8db74b0f0e0d6418e212934a9f667317e916f879cf9f096bb684d404258653708db6172","ssdeep":"","tlshash":"c1d0a78939817d1d2a136564d977086136f704a8789bbcc166209d911c333ac83a1c8c","first_seen":"2025-03-19T10:41:28.874854Z","last_seen":"2026-07-04T06:12:13.896895Z","times_seen":1910,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/twq.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /twq.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 06 Jan 2025 11:28:08 GMT\r\netag: W/\"134-1943b5f4b05\"\r\nvary: Accept-Encoding\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ey8NfBzWlv942MQV6Kv%2FPkeBvRx7fZTHmyWJn4dhUTzBH6c51o5VaS53CA4IWqVncWmy%2FtLzM2YWUfbsLqXgb0tOKW%2BrcJLhNg%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eb156a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-08-06T04:52:41.869407Z","times_seen":27009,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/new/landing/block1BgM.webp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /new/landing/block1BgM.webp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 07 Jan 2025 22:31:13 GMT\r\netag: W/\"772e-19442e4b771\"\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z3tJTJ1A4Elxow2fG47SMdit1eswjXVjoU5RSMvzxTbGRiNIavvMdLkhGykF%2B0%2BoxHmJTE%2Bv%2BgrHIDaTUBdNMPKTq4rK96k8FA%3D%3D\"}]}\r\ncf-ray: 95c1a0e79eb656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1d26004f83735bd2521a49722ea6c06","sha1":"6eae79b2d1c8a1539bee33abae3ee09825468b54","sha256":"7a5783cd7895fd743a8efa30ee7de9402deedc294d8eeb71ea22f676b787ea10","sha512":"8cc7a3b942340c94f55232e222fc27cbde7815ca763c483ae770397d3f46b5fe49d2db9f2daa80736f32caa1eb9996b0c4ea08d05fb691b29083b7d2a6032601","ssdeep":"768:SYZ9DOJNKHAYuYgmHR9NjvFwyaDtATAFSUt:XIKHAYuYvHR9Nj9Ba5A/U","tlshash":"3fd2f18c066ff44c505ae723823d4f4917df885e963c355a8aa78335a4e9e136c8f53d","first_seen":"2025-01-31T10:41:20.119302Z","last_seen":"2026-07-04T06:12:13.839458Z","times_seen":1919,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/css/0d7f01007d4df3d7.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/css/0d7f01007d4df3d7.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 04 Jul 2025 23:38:23 GMT\r\netag: W/\"12233-197d7ce3166\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 271860\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfCWZqwtEdHA5mc0Ino4hLUDbxTQpd5fsTEH4HE7V9CCIlyaa7264HADLxNxUGR7wOCjW%2BICKrLxT1GEaaLE0B768g1ptQQMTg%3D%3D\"}]}\r\ncf-ray: 95c1a0e73e0256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74291,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1484703337977a45b1b502303cfd48ac","sha1":"7684aab03879447d2748f903f71b033930ebbd57","sha256":"8a8588c246b1b89aab105b253baa3eaa7056809c7dce14b153cbe6b2452383c2","sha512":"e981b0e28561ddd8a75da8d3759463a7059f8e2e8f59a1e9670b8b900894d77bec4abfbeb50c728ad06c92f9008c664e0a434be6f2d4a1e5fc6c0be13a78b423","ssdeep":"1536:++ysgcWNlUJwdPIzf39OM/hxTWg+96f43tRBwhJJGppDzBCYr2uhsTIc:gNlUx","tlshash":"1a7394729219b81cf063801374c1a59e7134c297e73356aeea957e2bc2d62932b737dc","first_seen":"2025-05-09T22:20:49.001756Z","last_seen":"2025-08-22T23:57:26.193823Z","times_seen":396,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/css/317691348e35dd2f.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/css/317691348e35dd2f.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 03 Jul 2025 07:30:50 GMT\r\netag: W/\"853-197cf32037b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: HIT\r\nage: 435390\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11KNwSju%2BFAqW%2BdJd1HoLZReYmoKJKx%2B%2BTVTmBrqPu19EQNnlSucHwrc2dB8HIKTR4TaTw7GTPnGl1XV%2BdeXBmh8mLRKP%2BuZqw%3D%3D\"}]}\r\ncf-ray: 95c1a0e73e0556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2131,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2131), with no line terminators","md5":"c66423fb88d7272cc42515b5c255800c","sha1":"622df8403db965331f0108ad5e532c6a1831fd1c","sha256":"28de71941d77d94d371ac216119d39292e7a92b5baf7c36feede5a4db9cc4437","sha512":"35068b1c594a31b430d7ba1f1b1cfb1d081980251514b42b7c6ec69b3f395bcf56e25bc231beb0997853026572ee853aae533b02b49ce8e0274143d10373b3da","ssdeep":"","tlshash":"6941223a303ea2ff7966baf254dc049ba127c9815633af5da6446d39c3c91d10b61b8c","first_seen":"2025-03-19T10:41:28.890253Z","last_seen":"2026-07-04T06:12:13.889276Z","times_seen":1914,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/css/3b1fd672ed5608bd.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/css/3b1fd672ed5608bd.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 08 Jul 2025 00:43:11 GMT\r\netag: W/\"1f90-197e77c9749\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 5261\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWYeHGOAE5cAq2YH4ohB18T1h0LDdr6eQZq6cUWEg87GMX6afQdpLrnUACjx%2BwhCBaIS4w830HilaXbgPBw%2BKcCQrFcPWhSJuA%3D%3D\"}]}\r\ncf-ray: 95c1a0e73e0856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8080,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (8080), with no line terminators","md5":"3cb1044f342a57e47b25329d72d5dced","sha1":"9c88092e249745f7791f53c2abc08aa02c512e4c","sha256":"e760ce7ee0492f732a5d1cd0cf1924b01a209edf24613d6582c29b872f7d20d9","sha512":"b28b8e7ba8d99b8f114b9b0b5a8ab7942eaa431a7a5b891008b58fa52d979573b24a4ec3c43422ec1cf92777581ae325699d1f30a5602995ea91f903a6f3cd0e","ssdeep":"192:9lFRa0g88VW0QbxPCjMxL3uy9o/zvoPodLy/tlt:+0g86+PCAxj/94zvx18t","tlshash":"a4f11332267a602cbeeaf476efe0b56931c0c527933b16e1fd49f926c08916b3711359","first_seen":"2025-01-31T10:41:20.155299Z","last_seen":"2025-12-05T12:20:10.385816Z","times_seen":784,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/webpack-eefddb9ab913f7c6.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/webpack-eefddb9ab913f7c6.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 04 Jul 2025 23:38:23 GMT\r\netag: W/\"1032-197d7ce3162\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 195309\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5snTlUPyJtf5GmG1yGhT8%2BuEP3ZghMuVPx9Uow9D%2BSGVBTeg%2BRnBru%2B2v%2FxO0nPMzNaAezq5oGtBhY9BpwXF1VUgjED4ZuJyjw%3D%3D\"}]}\r\ncf-ray: 95c1a0e75e4756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4146,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4146), with no line terminators","md5":"b5fbf80233078a659363aedc26eb05c0","sha1":"8ea9f42f0b2c718449cf8b2231565092367eac8a","sha256":"ea4c138e436f126e652da0d26de235f9f5354fc2a9b9132ee68780c875bd3333","sha512":"b4b39955dd8e078c775c960c1c1a36f4025e0a6ad5c2c63eeb3a97edeb7abbfd1657f43c955fd90530826e1cfe194a875b8854381a32903aae903d2800c6a3db","ssdeep":"96:kMyYE1q9WlR3lMka20VGL6VLW56l2WRZEELDYyM:kz1mWlNfajUmYyRrhM","tlshash":"2581a7de7161f8b91782a4a1443f9446f13f28f2281ee4a0da25e4f5fc7554d8323fa9","first_seen":"2025-07-05T20:02:32.032846Z","last_seen":"2025-07-08T18:26:37.429257Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/api/extra/promoIp","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oreswap.com/\r\ncontent-type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QCiT%2FHD82vd9xpbT%2BIgA2uVTt4d6Ap%2FpnoAskl8bmBSstPbFwLhA5ixTHlQGEE5hkGnwp1bDlCdeZ%2F12ghdllnzmHOCnNs1F4VWDJcy%2BrLFU7aD3mPBtDZ7PLerf2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 95c1a0ed1acfb512-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=907\u0026min_rtt=0\u0026rtt_var=339\u0026sent=269\u0026recv=247\u0026lost=0\u0026retrans=1\u0026sent_bytes=159318\u0026recv_bytes=15756\u0026delivery_rate=4680301\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=24052\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1983\u0026inflight_dur=223\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-06T07:01:43.621928Z","times_seen":180229,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/css/f89cf37e5720cb55.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/css/f89cf37e5720cb55.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 08 Jul 2025 00:43:11 GMT\r\netag: W/\"28a-197e77c9749\"\r\nvary: Accept-Encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 5261\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JLFzHj739FXlq9LOtmJg8qGcIpWmKma7gDxr%2FsOz0OBs5SGfgFG2CfAJKOfqLhL9BwqkLdHIw4acQejGpP69k6ETT09TZf3Rg%3D%3D\"}]}\r\ncf-ray: 95c1a0e72dd856a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":650,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (650), with no line terminators","md5":"8941179a0958254af7b2b3c49420d795","sha1":"21d5e6c630b1c669d1678081d2c2479b5f9836ac","sha256":"c6076ab0276d8e1c5227243e112c7703fd9f873a548ab185c1d0db493b7ed602","sha512":"ea1b86b096acf66cf69b5fba95e5b19bd95c5ff7175f5458b1f585e91274c0621fc9f65fdb149129138630cb55ae3bb1ac6d46bf87d63bc8addc13066068cd4c","ssdeep":"","tlshash":"45f09e19e1911185b1c34e1a78e6a33ce97c04c2abe55f59912137b443f85aa466a349","first_seen":"2025-04-11T21:37:07.823711Z","last_seen":"2025-08-22T23:57:26.192002Z","times_seen":397,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/css/2b3198649a078c56.css","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/css/2b3198649a078c56.css HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 08 Jul 2025 00:43:11 GMT\r\netag: W/\"7a4-197e77c9749\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-cast-cache: MISS\r\nage: 5261\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CtOYG3AY1XqbhMCGGofjHFtzp4Msr6VxFhrikALhjBCs1WwScVUKrS%2BuuOfO6j71ZoHM7wuNaoNgtj5us2F3wyOdcimIoTw2IQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e73e0a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1956,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1956), with no line terminators","md5":"a40a0db04beb37ff985968da200beeb9","sha1":"43599a6376c0e01d48e68a6a16325b01def3191a","sha256":"c6ce83ab109eb73ee51d309e1b8996660a62a5a0b9b724b54bcbd31dba3bb9de","sha512":"1047d3271e96383f0a382f426e4d3de0d6e1e62adb2ee6db4edc9078fe95d616642a4f6bbe969c27151abc35c09f53ebb8b8a1476bf8856ce7be043d758bb925","ssdeep":"","tlshash":"ba41dd712044226cf4d9a09af406644f75c1892ae21328b0b28de4acd1e3ef7fdf13a1","first_seen":"2025-01-31T10:41:20.175967Z","last_seen":"2026-07-04T06:12:13.894192Z","times_seen":1900,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/_next/static/chunks/app/not-found-7e7b0b0e9b8f6570.js","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:11.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-7e7b0b0e9b8f6570.js HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oreswap.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 04 Jul 2025 23:38:23 GMT\r\netag: W/\"336-197d7ce315e\"\r\nvary: Accept-Encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 253457\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xg6L1Cobmbmz%2FDhJqsu%2B%2BdGivXDFX7LT%2Be7l%2FREhBt98xnM0ON%2F6HeOerL8305MQ4tpn6jn7M75Xui0mIRIVPKkkEngy9O5oQ%3D%3D\"}]}\r\ncf-ray: 95c1a0e79ea956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":822,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (822), with no line terminators","md5":"2f06c2493bc081c4707fc2a5550cac9e","sha1":"1cc684e94cf0e085930adefddbe86e95d19e8812","sha256":"c483c4dab60c2392af4262eab448f856bad96b430e9fa6ac6bc7babbf05d6d40","sha512":"4ddb6256ed8d4725e34c93a0d26e8246d6686b75f826a4af5b2c84600024b34be0985392833f59e1715751eb70780ee04a51daa7df01af638a88b817a24d17cc","ssdeep":"","tlshash":"0901520931c175c8b6036cfc50bf9809306f2698008e54b2d8b5ec912d2228cba43fcc","first_seen":"2025-05-09T22:20:48.97099Z","last_seen":"2025-10-04T20:33:26.627174Z","times_seen":440,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oreswap.com/api/extra/pixel","fqdn":"oreswap.com","domain":"oreswap.com","tld":"com"},"ip":{"addr":"104.21.20.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://oreswap.com/","date":"2025-07-08T18:26:12.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oreswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Jun 2025 20:50:42 GMT","end":"Thu, 04 Sep 2025 21:49:02 GMT"},"fingerprint":{"sha1":"20:4C:51:63:70:88:6F:EF:DA:F4:B9:7B:2E:17:76:4C:91:F8:49:F0","sha256":"4B:1D:60:B1:3C:8D:70:F0:BD:BC:DB:A0:D7:82:ED:17:CE:67:13:76:7F:0E:44:26:23:F4:E6:27:9C:E2:11:6A"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: oreswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oreswap.com/\r\ncontent-type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 08 Jul 2025 18:26:12 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=12hALwsQN9J48qeYLO022qtIHciqM3JSlonKQVIXgw9R5%2BQHkeDDIjbzBHvqb%2BGw5GLp%2F4H7VFQj5sll5pkO6ExPgqYHdMoTD1H6re2vpsR1nU5eXY1WRC%2F1vaRL8g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 95c1a0ecdac9b512-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=842\u0026min_rtt=0\u0026rtt_var=347\u0026sent=260\u0026recv=242\u0026lost=0\u0026retrans=0\u0026sent_bytes=150683\u0026recv_bytes=15306\u0026delivery_rate=3744234\u0026ss_exit_cwnd=14905\u0026ss_exit_reason=2\u0026cwnd=25402\u0026unsent_bytes=0\u0026cid=c2997349455558ae\u0026ts=1483\u0026inflight_dur=196\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"428647be4acae0d85bd0799a59237001","sha1":"25b1dbe5aaaf5fe53a11fdb05fd14bcad3e92ebb","sha256":"edad519cb99926a099d84224b6b7427bbfbaa60c6ecc1673c039a0723be93006","sha512":"8ed0b8ab8b00e7883301e4dc47e6ae3c38abe1686e6de48d43983fa8105203f86c36b86cff1a09c9bdf9406ac7c4ac2f8b6a8654a42e1b5d03d843b5085428dc","ssdeep":"","tlshash":"f4a022c30a200bc2cc00000008203b22eec823238300022bc00c0200caae0fc30c333e","first_seen":"2025-06-04T11:30:16.150294Z","last_seen":"2026-08-06T04:50:10.462127Z","times_seen":17461,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-08","alert":"Sinkholed","trigger":"oreswap.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}