{"report_id":"24a13ae7-d494-4cba-8790-8897f7a8a3b0","version":0,"status":"done","tags":[],"date":"2026-09-16T19:12:56Z","url":{"schema":"http","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"104.21.80.41","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"title":"Switch Dexair Ark | AI Trading Platform | Official Website","dom":{"size":140578,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12666)","md5":"f72f286c5a6b8de8b50753457f94ed5c","sha1":"0efb7532782ac435c5faf80cd7d84d3a488ae23f","sha256":"583d0fee4ba9c6ba9b4c8f33324a5f704bb435e78a9d40873e7718fb7f4666ee","sha512":"fb2c86287980e083e65dac221478bf55cebd59cd35d2030a0db395bad88a099daa4b46af6b3293529ee34ed241b9e167ec62f464b91b54478c343c7f0a339d05","ssdeep":"1536:3v+JxX0/C75T//e3Or7sOy2+UBH4crIRPCikFKZzwMylwOACOw3v2PuUOnXph37Y:3v+DXR5L3XID1TdC4PuT7c","tlshash":"8cd35c3585cf107b1d2201c7754b331b3298c1eeffa194c9b56ce66c1bc5ba29638b9a","dom_hash":"domhasheafbbca2a34a8b2ed195c563e96938fe","first_seen":"2026-09-16T18:57:36.160073Z","last_seen":"2026-09-16T19:12:57.904513Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"104.21.80.41","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T19:12:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"switchdexair-ark.com","ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-15","domain_rank":0,"first_seen":"2026-09-16T18:57:31.843909Z","last_seen":"2026-09-16T18:57:31.843909Z","alert_count":56,"request_count":14,"received_data":273055,"sent_data":7845,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"ClientJS:0.2.1","description":"ClientJS is a JavaScript library for generating browser fingerprints, exposing all the browser data-points.","website":"https://clientjs.org","common_platform_enumeration":"","icon":"ClientJS.png","categories":["JavaScript libraries","Browser fingerprinting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":5,"received_data":324262,"sent_data":2686,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":6176,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2026-02-26T11:11:38.239945Z","last_seen":"2026-09-12T15:28:28.235074Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":940,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-13T23:16:40.429603Z","alert_count":0,"request_count":1,"received_data":55968,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-09-16T22:47:14.584356Z","times_seen":366462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-16T22:47:14.7824Z","times_seen":128297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b6a46b3fb2ab9307d013def98fd7289","sha1":"b45977827f6c96e0cdc9b73c489776ea81559938","sha256":"aa441106c183f4866b729dfc92f96a0bc97bccbf28f5c29b56053f71752ab196","sha512":"d962c6341a814b3f873175ae83221d90936be9f3da9ef5ec8e3e62bee3339b3b4d80a55a247248727ead92a995a15e0428961dce52df362d0ed4added44b5601","ssdeep":"1536:rnY4IOlII1MDSw4UnIASVg8fljAWgfPMatSsC:LY4IOuIu4+I6fUSC","tlshash":"a8434c9eb1cbb23947aa3195c13f4845377a45198c4cd0a8f9f1c9a0bd78a9d006bf7e","size":55174,"data":"","first_seen":"2023-03-07T01:42:50Z","last_seen":"2026-09-16T19:53:15.931846Z","times_seen":912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0abc945169649a8755ed8b3457049185","sha1":"05c763d704f34daa38c5d365b9a886eb056874a1","sha256":"f1cf82ef8ce5deb3fa3b2e8613ac356bbbbd8470f921956c940c1bb9590284de","sha512":"675195012e901c3d68031f8f986d81469a11e0cd77bf8eca022b438650b1f341659ba0fe56fd4f94ad7f7bec17b57f4de554d4033de6d6a5224b6354122e0d8d","ssdeep":"","tlshash":"71d0a75de620a76616f29130522ffb1259b341d70d409950491ade40ea38f8e92368ef","size":223,"data":"","first_seen":"2026-03-27T21:45:01.945196Z","last_seen":"2026-09-16T19:53:15.95338Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58831d1e62fe810505d7beebf26e8a25","sha1":"ca6210e27ea2a721dde7cecb4378712dacac8581","sha256":"7a923300adcce6174841c53483774d990afde64369c390c3f628d6b3cd7de53c","sha512":"39249dacf5533e96603e7d0623e7671e3f29fed91fdc873cbad8de571414808def11608d34af267d1f292286484dce65086590786cb22f7b252ca62ab294f53f","ssdeep":"768:FsWL6tEaCikFKZ/7IH3tt38F7/qJeQgNOGo03svughfwBcwhuZVhqCOw3rWBDHs9:uPCikFKZzwMylwOACOw3v2Pu5","tlshash":"d363e725c9df549b0e2011cb688f3b2b539cc1fcffe1a9da8548f81c11d9762a51ce9a","size":70371,"data":"","first_seen":"2026-03-27T21:45:01.947507Z","last_seen":"2026-09-16T19:53:15.954202Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea956eaa6fa3f32edb70e9203a4471d1","sha1":"6b4af9b74d2ffc2a7bec549589116fddd712d609","sha256":"8e42d856ff5de80e95c77219e06dc2d0ee62f008f8fcfea8576aff5231de57d3","sha512":"16db4f26335c04934e2e711f7f08286534fd8807740d43ee0554e3d112127e62d8e6d70835f2baebdde1494b0c4516b4da6c723a75a0318c843d66d676e5557e","ssdeep":"192:IacboFWwLj4ca8UYgesPSLnPUZbwKNZ61CQqGm+I525VLMEBngwQscWaMXg0p4Ia:1Yz6jUZbdACQtnI52PAsphXnnuN","tlshash":"1252a3ae7827063928f701bfbfdf23406570418f6882d590bc5da5a02fd8f465a39be4","size":14510,"data":"","first_seen":"2026-09-16T18:57:36.175365Z","last_seen":"2026-09-16T19:12:57.929815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6da867fbf1e41957a940ae006e1cdd1","sha1":"b888bee545252e883012de1d7bc52285193b9950","sha256":"beabd6948301a38e14af1908e62f7b43a17943b1176f0427fdd27e045d7ded0b","sha512":"6d19a048083465525294d4420ca83f26812abc20b1a6b39944cd250c367e4a211543adc1ccb65c1503a620803001aeb157b4fbfea71974e895ac6a811113354f","ssdeep":"","tlshash":"9cc04c056575589c500292111b1a62025295a92268156a50b6bc49d1bb8669e80ec969","size":133,"data":"","first_seen":"2026-09-16T18:57:36.176495Z","last_seen":"2026-09-16T19:12:57.931877Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c09c807d2a69808d81f3dcf9c4e17659","sha1":"12c8adb2687f5d562f3aaf5a0f91273b3dffd5f2","sha256":"50a3e10a1daf2c03d974bfcb86a38a415c73f0d017399a8ecfeb3c176b6e050e","sha512":"9db9b31426061fd5e9562ef09ecf8c88a058dcafd2fecb1901d33045c26b843118c27ebac0fed9300db2ed60f0a4660b823f8fb6a833447e298d3ff0a9cdb7f0","ssdeep":"","tlshash":"4aa0228308c8b0b803028208033b232223208088cc0000a0c0008c003c080ebe0e0a02","size":63,"data":"","first_seen":"2026-09-16T18:57:36.177479Z","last_seen":"2026-09-16T19:12:57.934097Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dd51bf58e18b1db566ad93f19e506c7","sha1":"906ba56d8a88a8505369ff5549f2498ae88b859c","sha256":"9345d27493504c8c9bbd19e5e0aba16099cfa6903089479811ad93ad99bdd543","sha512":"8faed9bc6f1ebac530c5e3ef10c8f2f96cf5c96030cf85bbfb2dd63abd98f60d170c03a1c392458882bac2d8a6113faceb9c516ff0e40e7c86403be22eb6c8f9","ssdeep":"","tlshash":"c860003030003cc3c00c0000c0000030c030c030c0003c000c00000fc3300c00000030","size":14,"data":"","first_seen":"2026-03-05T09:10:23.48722Z","last_seen":"2026-09-16T19:53:15.96025Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"switchdexair-ark.com/","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T19:12:26.755Z","timestamp":1789585946755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\nx-content-type-options: nosniff\r\ndate: Wed, 16 Sep 2026 19:12:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a3c22ec798bb042d-CPH\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=201, s-maxage=3330, stale-while-revalidate=97446\r\nlink: \u003chttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css\u003e; rel=preload; as=style; crossorigin, \u003chttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css\u003e; rel=preload; as=style; crossorigin\r\nserver: cloudflare\r\nset-cookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F; Path=/; Max-Age=2592000; SameSite=Lax; Secure\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\ncontent-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com; img-src 'self' data: blob:; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; default-src 'self'\r\ncross-origin-opener-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FrIy5ZUriR7iTqayl9438kXvtL0h9%2FUGzeUB43P7PsWdl1Xo5%2Fhyr%2FhlSs89Y578LG5jn09FGCSe7lw0RGBOepdBPo71pAoReQVeXD8K3%2BhkS%2BnLoQCMuadwflS%2FwrlYUECXFxKqdw%3D%3D\"}]}\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"entry_url","value":"https%3A%2F%2Fswitchdexair-ark.com%2F","quoted":false,"path":"/","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F; Path=/; Max-Age=2592000; SameSite=Lax; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"ClientJS:0.2.1","description":"ClientJS is a JavaScript library for generating browser fingerprints, exposing all the browser data-points.","website":"https://clientjs.org","common_platform_enumeration":"","icon":"ClientJS.png","categories":["JavaScript libraries","Browser fingerprinting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140631,"size_decoded":42316,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12232)","md5":"f5b6dca3e240bbb7a6cf2b5101326c1b","sha1":"e62d4a8b15f938518097d305c6920768038d061d","sha256":"ed02b715b45339b040c02bea322e1f7a762ac249c24493e640a58fbd9f635702","sha512":"fd70f81cee73265687caaf1e76571741af24d0934c4e2d28bfac98f76d6a4b3dc4ea335cb2c3fc7bbfb309b6b67232564e22f19ba8a505c7956d250075ee6de0","ssdeep":"1536:bv+JxX0/Ck5Do5e3xSZHOZ2+UBH40TPCikFKZzwMylwOACOw3v2PuUOnXph3th:bv+DXa5k4Uh1TdC4PuT7r","tlshash":"86d35c3195cf107b1d2201c7754b331b3298c1eeffa194c9b56ce66c1bc5ba29638b9a","first_seen":"2026-09-16T19:12:57.908842Z","last_seen":"2026-09-16T19:12:57.908842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":15,"connect":35,"send":0,"wait":31,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.043Z","timestamp":1789585947043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/solid.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nOrigin: https://switchdexair-ark.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://switchdexair-ark.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3590780\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=muJ75UKpotksifAI6S4KNcYMXuFYODJ5YnaqymNoWyTXTFHdL7hnFE7W0Xs9Rz10lvOmDZvSBKcmwGogcbvHBsQCz%2F9Xc8VcZr7S1dq4WtCBpPMFNL3hxm%2FDd1LdkQUXMytiYJhA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c22ec92b90568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":1289,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (353)","md5":"4d63c1a82931dd3b2d8ba3135987b9c3","sha1":"b79ead6a4a6548ec021c030e9b0e95c9ba0648e7","sha256":"b8afa4243dd1bf735f512708da5335b0ed314d9e58a0a1cf1b781250cf5fb004","sha512":"a5994a1acee712a178ce81b47a078ad7aee5eb2a2fb2e2fc6a9df4774ee403900952af96cac165434d832d70263779f4f87dc9573e678bc489667ace6985d604","ssdeep":"","tlshash":"51f08b1d056504a042810d423c8dfa9dec02b0da7ca84b53f137986d98e9a5f31f8f18","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-16T19:53:15.935683Z","times_seen":992,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@400;500;600;700\u0026family=Space+Grotesk:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.222Z","timestamp":1789585947222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@400;500;600;700\u0026family=Space+Grotesk:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 16 Sep 2026 19:12:27 GMT\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5492,"size_decoded":1268,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d25962f277e175069b5fa8d7bbfb1157","sha1":"3f5c469e1ac2da960923f9611b35fae15d48ffdd","sha256":"39f1200901fff72ef2cbe811b5fe1d3465f415cbac5bed01bdc39e5cd8abbbe7","sha512":"b0ce95f1f6f26306dc52769795fb7bd1b1ddbf6b0c63ce96b0e548be7523fdffebe316adb0982745af4e52d60e90d7922ad0db7273cf33a85bf8a0b08083d6e0","ssdeep":"96:OOEagONbOXagONbOxMagONbOpagONDNQOEaHQOEaGJc+uhQOEafNDNQOxMaHQOx7:pgwgpg6gax/GiZfRG4ZYiG/W","tlshash":"feb102820467e600eb635cc222cd7e36fe4fa1546450da386ffe18d8ed9ad321315b2d","first_seen":"2026-03-16T10:38:17.666214Z","last_seen":"2026-09-16T19:12:57.914193Z","times_seen":41,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/terms-popup-mobile.svg","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.240Z","timestamp":1789585947240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /terms-popup-mobile.svg HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c22eca4968042d-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"b07f3dbd832dc0e753fbbb584c605d4c\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FP3lPe3jQgw0m%2BZUIkeqWgM2BNAWlZzSjgBLE6DSTp69gvkgGNH3urCAVc7tKpBbKhKTbG8TIgSwIZcDLVgjJ%2BVSfmv%2BgWgntEA3cy810NkvOZ3W96QGfAKjgDxMXcaltCGW26NIA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3652,"size_decoded":1915,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0590631e9b19df995ca48f91e4c42788","sha1":"d107bcb55fa18bb03d1b2845e50d5f5437be45c2","sha256":"fc916bcd14c390149297cccbfb968d66dc4d47f69170be3c70c6d2474f5c1709","sha512":"2ae65026d6aa333f14dccc52158561aa8f184a3443bb5dc2f79de8027d7d748d51f7a86ba3500c89c8435b30a62a70448261a7eb5040e58787e300c08f5f308c","ssdeep":"","tlshash":"3b718bd1d3ca072ef24dcb69c345a3bba7a1d55cf69ac15449e6820a9fc3c4685cb0ca","first_seen":"2026-09-11T04:36:15.655232Z","last_seen":"2026-09-16T19:12:57.915454Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.333Z","timestamp":1789585947333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 18 Sep 2026 19:12:27 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeJLUl98c17mpLxNXgeeMMspM9ZFpKgAbS6Gp3fwjIC%2FC3H3vjz8esmITEhE29mkF2YQPfHtoj%2FJv9k14MKJnhTDtO3DkLA9UnCwN28DGW6KZc0mjI2YBvTUWWCoNZVs2eGYsWRCTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\nserver: cloudflare\r\ncf-ray: a3c22ecae9a0042d-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4569,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-16T22:47:14.7824Z","times_seen":128297,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/cf-fonts/v/orbitron/5.2.8/latin/wght/normal.woff2","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.430Z","timestamp":1789585947430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /cf-fonts/v/orbitron/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6JyApHBxNPVsTYa6SCMClb%2BwVckEttzDt%2FHOwfO4pXTSt8Dh86U1F9sGZKQFplYXJroLlL5cxI5FEO5r7SEL2omD440%2Fj78VEo%2BdcKuRSzDNsacdFTKPgJINvCs4tQo12c8vbykYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3c22ecb79cd042d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11800,"size_decoded":12413,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-09-16T19:15:30.037446Z","times_seen":8603,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.227Z","timestamp":1789585947227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/solid.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3590781\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ab1ZdPiVei3EmLq4FCJ19r5g%2FlZn3D%2B9vZSLmn9NYykUmvQj5E7HuYh%2FbPoz0AhVdoi6%2FoM%2FAENJVwuRhbp9VxOqdB%2FNrGNK4eovAxNe4%2Fy2k2Q1TyqJfAXBQiLaFh5TiHMgkd%2Bd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c22eca2ba5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":1301,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (353)","md5":"4d63c1a82931dd3b2d8ba3135987b9c3","sha1":"b79ead6a4a6548ec021c030e9b0e95c9ba0648e7","sha256":"b8afa4243dd1bf735f512708da5335b0ed314d9e58a0a1cf1b781250cf5fb004","sha512":"a5994a1acee712a178ce81b47a078ad7aee5eb2a2fb2e2fc6a9df4774ee403900952af96cac165434d832d70263779f4f87dc9573e678bc489667ace6985d604","ssdeep":"","tlshash":"51f08b1d056504a042810d423c8dfa9dec02b0da7ca84b53f137986d98e9a5f31f8f18","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-16T19:53:15.935683Z","times_seen":992,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflare.com/beacon.min.js","fqdn":"static.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.230Z","timestamp":1789585947230,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T22:51:44.50059Z","times_seen":18503778,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/terms-popup.svg","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.238Z","timestamp":1789585947238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /terms-popup.svg HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c22eca4966042d-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"62ede12b77d1b3a88d61cf05fc42aaaf\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rZ3vKgGfM%2FhGvB1JP8RKLobByu2YMVjGumOAg0j8qy7FBff3Nl4w0nAuzZtby9a0sDaCiQ8qUN%2FcKD43xpLckR6M3%2FZ1ahrof7RX1iScUzYHbnq3eP374CXQFMLqelGFU9bTXzNrQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3094,"size_decoded":1905,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7f60df4375980c47a4b2a0f8c6e2cc6","sha1":"8d561d24287234a1a9184b8dea51bab722a56a61","sha256":"bd9cf456a29fe6590e01f93a8d4cab0d7277a383c99e482bd0b8834f0286fbbf","sha512":"6ca2ddef4d7290ddaa9e53eb0dcc5f3a63a8a7c3ddf5515745f4d8211427d7eeb0e7b3610f5ef51a8c5510b7a62f70ee25ca737d3c06915ff7b39bb8c662fcc9","ssdeep":"","tlshash":"59512096c1ce0b3ef7498b85c346a7fba7b1c55cf39ac2a40de502492783c0685eb1d9","first_seen":"2026-09-11T04:36:15.654029Z","last_seen":"2026-09-16T19:12:57.919822Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.268Z","timestamp":1789585947268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 18 Sep 2026 19:12:27 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAllF6njaSe1Qfcq%2FKJ3Yh2hkoSyeFXAzW9OFgZfQiYkJoTRBol7QbIAD0s0fyqJiT1UDHzOP%2B%2F%2FWiqr2sDEG%2Bu734VUgWIeAkFFuX9cOAqhB1Ah9DvMnDHi1NxkJQyACzxjecDdZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\nserver: cloudflare\r\ncf-ray: a3c22eca7972042d-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4575,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-16T22:47:14.7824Z","times_seen":128297,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/disclaimer-popup.svg","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.384Z","timestamp":1789585947384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /disclaimer-popup.svg HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c22ecb39b4042d-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"1f09be44f1433ae3d6f96ac3d4134526\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FPxa0X9laVzb4jTyAbmQQ7DSoO387H7hKgmNZXagewxustp7%2FVU2rm5KA6nkpLlwXqt8c7AJzVgmvAF%2Bizxljah789QnTbcEEV7MgwZ%2FN6QRFaGm%2BIrv0fyO3IJPoA20uIicfeOVA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2041,"size_decoded":1697,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4679b021e56fcadab15007b5d5fdd43e","sha1":"ab355512972d772be6527794ae0184fd33dcf44d","sha256":"5f33d60c19a56954e6df0c3956c5f3f9f2150b0b896ea05c47045b3b467b29df","sha512":"020fc2d5e201875f8bb4979dd595921b4061a79a70240de97769b5896f4f1f301ea9dddb99ad1aa54d3500c5430bb13496485ae8f86a10f9da51d695a483bca2","ssdeep":"","tlshash":"de4145aa91cd0a36f686c048e5e6bbd7b3f5d09db348c1941cd4002c8bd3c4ac9d76e9","first_seen":"2026-09-11T04:36:15.663599Z","last_seen":"2026-09-16T19:12:57.920875Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/cf-fonts/v/orbitron/5.2.8/latin/wght/normal.woff2","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.455Z","timestamp":1789585947455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /cf-fonts/v/orbitron/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aqr9WZ9SGkoAuuQYZLuzCy2Hrc2Yo2fyo5cUAS4jEbq%2FkHL94IrlzaRnLd6hdO46dlkcmi1AfEYwLsxULkFehsIPhdO9yOJM4xl4V6DgJAj43TtveHZllZD17QN%2Box%2BiDy8GwzHaJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3c22ecba9d8042d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11800,"size_decoded":12411,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-09-16T19:15:30.037446Z","times_seen":8603,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.042Z","timestamp":1789585947042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Moz: early hint\r\nOrigin: https://switchdexair-ark.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://switchdexair-ark.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3496809\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qvh%2FiZoSWiNauG85F2DDGZ%2FO5YLFPO8Ic5PgbddwhTAa5ZBo4%2Bdrg2TOs1TvGhUUc5mIm%2BkG7T1cjw%2BPwXbYrMRzUBdfcsHDcLmjAwtwgVEoemTxiX81FjpT1aabcbhO5O8GYql\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c22ec92b91568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14629\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80795,"size_decoded":15638,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"050a20fcaed9e77ff3c43b7aae625283","sha1":"397e1e16117c1a4166e52f424e2ae4a2b5fcbe09","sha256":"8eb5b44ce5971a501e5a17954c464b80aba0c4604675b5603a7f456459af88a1","sha512":"774a2534ddf90ba54b8ae940a1bc581d9897266abebe5f81188800c50b43e7e92ab9dae8ff134cbefdb220701c8861e9131b086ca5f788b83ed01e9dd24e3e64","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9f:O709gMGFiyPG9f","tlshash":"ac83cbf5e44c15d97732c44beb58b37c61b6f738d9810da9f02f580d1ac26a822c6b7a","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-16T19:53:15.930598Z","times_seen":2895,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/styles.css","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.221Z","timestamp":1789585947221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-ray: a3c22eca2964042d-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"f7470c2ebfef483bab038527ffdbb844\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukwTqpumkHzpr6zklCtl%2F5OuiowF8HhCGQu37YVid8zST0hzQf0Q%2B5MbEZI%2BwntCvXSL21l6LDyRtrwskxndSeVeKxOIXnBg1lMGOYg3jUvJm4x%2B75PwMV%2FwYyXO8Ljtu%2BiHVX0KXA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23862,"size_decoded":6308,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23862), with no line terminators","md5":"f9097f70d1322eb7a256a2756722b61f","sha1":"e166f9302640ac9dba529b1725da81305ce36b9a","sha256":"e168b4ea38383ee1712838721542d8f0ed64501d53c5a8198695cc2dc66d8ac4","sha512":"589159cac845825f6a351973166cf504a9e8c0f6079e33d8bea06bf86896a815a7a8ed541c13fe1ee65151d80aabb823bf3a09282f6a44206e12347b67b51aa3","ssdeep":"384:FQiz7pvai1rYmkawFsE+i3pK4h9Ge+WbYTGXqbxQpuC0/0hn:ZJwawFsE93pnrbY87sL/in","tlshash":"8fb2b761a201223df02bc5a6e9d1a38f7134d512e72303adda77a275dfc61eb4b35a0c","first_seen":"2026-04-30T04:57:36.9178Z","last_seen":"2026-09-16T19:12:57.922726Z","times_seen":12,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.299Z","timestamp":1789585947299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 18 Sep 2026 19:12:27 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msyEGUwapLIZPFnz92QrvTc03WqWCefg0%2FzqvI7axG1YO8LEZaDQkdVV3pBwyilP%2FFwWjM28DrTcxgH2ifU2wSrF4mgFj4pKuAqValGGkzROOBfDwnFH8s%2F7DTW9ojgIRXPloaEFwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\nserver: cloudflare\r\ncf-ray: a3c22ecaa982042d-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4571,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-16T22:47:14.7824Z","times_seen":128297,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflare.com/beacon.min.js","fqdn":"static.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.388Z","timestamp":1789585947388,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /beacon.min.js HTTP/1.1\r\nHost: static.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T22:51:44.50059Z","times_seen":18503778,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/favicon.svg","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.498Z","timestamp":1789585947498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncf-ray: a3c22ecbe9e9042d-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"4b07775696d52bc99fbbe96b3380bc9f\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7lbOqJ%2B7nJkzosqcgf7%2FaECt1F2eAlnExZi%2By8AB2cBstFRwxDk4nOOUqd14tDXjC9QfkAP57c6U4XGs7NAv2JDo%2BELw%2BZs44K9viLzhEmDoNFkLc2fc9ZK6%2FESo2X7b5KgErZbTcQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467,"size_decoded":1117,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3aec104d05eb80c4d32828004058c5f6","sha1":"c50b7a971ae84efb73ebbdbcb5939fdbc6615cc9","sha256":"ad0b89d4c2a2773744a4583e6a2eadb266d119dddbed381adf1736a77b048927","sha512":"07bf3fcdee42f4658809ff901966879ff1dcca6b676afbf5deba0b84380bc9cce812d895b31b48adfd3951a56f9c8f61df0e1f98d07ccc0ff4febb9d64a328b8","ssdeep":"","tlshash":"34f0972252c90809cb348281fb46ba92da79d086c101c8a0fed92c179b5dc9228d736c","first_seen":"2026-03-16T10:38:17.673728Z","last_seen":"2026-09-16T19:12:57.923589Z","times_seen":41,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.224Z","timestamp":1789585947224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 18 Sep 2026 19:12:27 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBsh4iwA1fc1pEZy1b4LPl6P0nA0tJ9v0w7FxO3EbqdPFyQa5YR5%2FZ0Z4IErhUWscqPNjm96bxqp3OuTGjASyjFZAlVNnNVajtbCfi1ZQIoEHnraDi7Q9%2BhY6xi6wKWWgVqZvmq28g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\nserver: cloudflare\r\ncf-ray: a3c22eca3965042d-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4569,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-16T22:47:14.7824Z","times_seen":128297,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.225Z","timestamp":1789585947225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/fontawesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3496809\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cS5h0wFB2xN0gGLgFuKP6mL%2Bsb%2BTA8gU%2Fr3khujDlK%2Br5f4s1rWT8ZwQGN%2BBmMXclCcgvbZN4EjtoG19s4wGzkHlxLdpVtjL0SUj0KbqehQ41HZsH8EWxhFNmYsOnBT2eIwF3Pl7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c22eca2ba4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14629\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80795,"size_decoded":15638,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"050a20fcaed9e77ff3c43b7aae625283","sha1":"397e1e16117c1a4166e52f424e2ae4a2b5fcbe09","sha256":"8eb5b44ce5971a501e5a17954c464b80aba0c4604675b5603a7f456459af88a1","sha512":"774a2534ddf90ba54b8ae940a1bc581d9897266abebe5f81188800c50b43e7e92ab9dae8ff134cbefdb220701c8861e9131b086ca5f788b83ed01e9dd24e3e64","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9f:O709gMGFiyPG9f","tlshash":"ac83cbf5e44c15d97732c44beb58b37c61b6f738d9810da9f02f580d1ac26a822c6b7a","first_seen":"2024-01-08T11:29:28Z","last_seen":"2026-09-16T19:53:15.930598Z","times_seen":2895,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clientjs@0.2.1/dist/client.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.229Z","timestamp":1789585947229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/clientjs@0.2.1/dist/client.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.2.1\r\nx-jsd-version-type: version\r\netag: W/\"d786-tFl3gn9sluDNybc8SJd26oFVmTg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2577486\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\nx-served-by: cache-fra-eddf8230144-FRA, cache-bma-essb1270029-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55174,"size_decoded":22004,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45676)","md5":"5b6a46b3fb2ab9307d013def98fd7289","sha1":"b45977827f6c96e0cdc9b73c489776ea81559938","sha256":"aa441106c183f4866b729dfc92f96a0bc97bccbf28f5c29b56053f71752ab196","sha512":"d962c6341a814b3f873175ae83221d90936be9f3da9ef5ec8e3e62bee3339b3b4d80a55a247248727ead92a995a15e0428961dce52df362d0ed4added44b5601","ssdeep":"1536:rnY4IOlII1MDSw4UnIASVg8fljAWgfPMatSsC:LY4IOuIu4+I6fUSC","tlshash":"a8434c9eb1cbb23947aa3195c13f4845377a45198c4cd0a8f9f1c9a0bd78a9d006bf7e","first_seen":"2023-03-07T01:42:50Z","last_seen":"2026-09-16T19:53:15.931846Z","times_seen":912,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":11,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.368Z","timestamp":1789585947368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 18 Sep 2026 19:12:27 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nUdSOGHCfwKJOyNLeZZfNRp%2BFiJCivMOKUkShqybWfiAoB3H2ZWC0oeGzn8%2FjDYpflqBf1FPIjGkfESbzG39Q%2BDK2rHRurfYMcb5o4ewjWUwJCpwhQfUtgWXb4TaDWPEY4BANwUg9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\nserver: cloudflare\r\ncf-ray: a3c22ecb19aa042d-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4571,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-16T22:47:14.7824Z","times_seen":128297,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"switchdexair-ark.com/disclaimer-popup-mobile.svg","fqdn":"switchdexair-ark.com","domain":"switchdexair-ark.com","tld":"com"},"ip":{"addr":"172.67.174.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.386Z","timestamp":1789585947386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"switchdexair-ark.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 10:40:41 GMT","end":"Tue, 10 Nov 2026 11:40:38 GMT"},"fingerprint":{"sha1":"ED:36:26:17:1B:F1:DD:9E:2C:95:A5:F4:E2:E2:DA:3E:BF:02:01:30","sha256":"53:20:B0:5D:17:6A:A5:BA:34:01:D0:AC:93:80:BD:7B:EA:8A:78:60:9B:55:B9:D3:FB:92:E8:17:B3:28:78:44"}}},"request":{"raw":"GET /disclaimer-popup-mobile.svg HTTP/1.1\r\nHost: switchdexair-ark.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://switchdexair-ark.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: entry_url=https%3A%2F%2Fswitchdexair-ark.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c22ecb39b5042d-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\netag: W/\"030ba1a629a184fcedb6b8118eaecf65\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Khd9DVwwgOLFnF57%2FlA4TIauBe5w9GKESOkgZODtwj9phbdBuCyqPXQdgP0t%2FekeJ7V7S9C8kYA6Gdr6hPsTz2SW2%2F4K2VFdUSKWmg%2B4i7cXG7HBJcJKpQzbKddJInN3SoVSJ%2FlrsA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2878,"size_decoded":1711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"625f72df14bcc346067b480ae8c0d5ba","sha1":"81fc4b7bd0dcb308235aaa606af986f1969b60e4","sha256":"dd1af895f68ab3f1973caea675dad807f7cbca4b0a5bbf25ef22d3230181f1f8","sha512":"c104174e8b3a7c96ce49976e2ff36d185d3e1390ccc986d62b4e4d52a41d2f139d3ecf69085d3d9c0a007fdf37134585c72e122abb721018f8c1bdca1b9653c7","ssdeep":"","tlshash":"c9517cd7a2c80739e24dcb68c359a3bba6e6d55ce756d1744ce10606df83c4685c70c9","first_seen":"2026-09-11T04:36:15.658768Z","last_seen":"2026-09-16T19:12:57.925392Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"switchdexair-ark.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://switchdexair-ark.com/","date":"2026-09-16T19:12:27.432Z","timestamp":1789585947432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://switchdexair-ark.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/solid.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 16 Sep 2026 19:12:27 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2644505\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t56tNJcxySstJRiFcTJhkHw7uNpdgL1FBovhSxRK%2BGsXA86z2GHQ7n6drUNGRvOK0ZyUanHDn5tJDSBxkdmz1Dm0HqQ%2FubOjSqShnsMDYr6z5tvK2elyBqSWxs1ZdDRbUfy1%2BJ64\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c22ecb7bb7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":157496,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-09-16T22:32:21.496883Z","times_seen":52551,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}