{"report_id":"26bd3a67-6b6a-47d8-ae2a-035369ca0ec0","version":6,"status":"done","tags":[],"date":"2026-02-01T18:51:37Z","url":{"schema":"http","addr":"pan-swap-finance.com","fqdn":"pan-swap-finance.com","domain":"pan-swap-finance.com","tld":"com"},"ip":{"addr":"91.92.241.204","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"http","addr":"pan-swap-finance.com/","fqdn":"pan-swap-finance.com","domain":"pan-swap-finance.com","tld":"com"},"title":"403 Forbidden","dom":{"size":154,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8a3791db6da845f15ff950f6b2e3b041","sha1":"caad19e7d4ae39e4fefc4424bf748191aa3d0efc","sha256":"8e4259e61e4978973489c84830454f42df46e49b5d1578c2a9476c3fd390390d","sha512":"3e9b85c04a816613377a58859f3e93e9653023f56605bcd3ba7d3b9c1daf40c703bd0098b02f6fd2b9674efe762c69774af064ca1582d4b78a79fd4e59b32dad","ssdeep":"","tlshash":"64c08c47746f780cfb0352c016873a80d48ac2b288ca4a10cb42069370c2137c4cb324","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"2025-10-28T04:57:40.383337Z","last_seen":"2026-08-15T07:54:18.641258Z","times_seen":447,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pan-swap-finance.com","fqdn":"pan-swap-finance.com","domain":"pan-swap-finance.com","tld":"com"},"ip":{"addr":"91.92.241.204","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T18:51:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"pan-swap-finance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"pan-swap-finance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"pan-swap-finance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pan-swap-finance.com","ip":{"addr":"91.92.241.204","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":9,"request_count":3,"received_data":972,"sent_data":1259,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pan-swap-finance.com/","fqdn":"pan-swap-finance.com","domain":"pan-swap-finance.com","tld":"com"},"ip":{"addr":"91.92.241.204","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T18:51:16.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pan-swap-finance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 15:01:08 GMT","end":"Thu, 30 Apr 2026 15:01:07 GMT"},"fingerprint":{"sha1":"45:EB:9D:D2:56:14:8F:A0:C3:97:82:F7:25:04:0D:86:28:48:70:4D","sha256":"AF:A5:38:C1:14:0A:55:93:91:A3:D6:95:5C:5C:46:E8:35:0B:69:DF:8D:6B:76:71:7B:0C:B6:37:2A:57:07:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pan-swap-finance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 01 Feb 2026 18:51:16 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1d1ed962f2c3b3101433906b6b71e395","sha1":"323b3ebdc78e3e6f9581706771cbd61bfed318a4","sha256":"2de2499f4e5f896995ee7ebaa527a39b75f520f98e12110ec6c156a2433dbe75","sha512":"5fafbbe993daaffcadae26c8db453bf195c30dea475dccdfa89166f58bb900004a81e21ca42ce1c61f8a8c85587b4d934a953082a1fb1a5256eb9502fcc92883","ssdeep":"","tlshash":"d6c08c67351e3c0ce7a322b422c36aa0d08bd3b088da1a10c640025331c31278ac7315","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-08-16T09:06:22.846413Z","times_seen":2220,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":168,"dns":24,"connect":65,"send":0,"wait":65,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"pan-swap-finance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"pan-swap-finance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"pan-swap-finance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"pan-swap-finance.com/","fqdn":"pan-swap-finance.com","domain":"pan-swap-finance.com","tld":"com"},"ip":{"addr":"91.92.241.204","port":80,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T18:51:16.734Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: pan-swap-finance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 01 Feb 2026 18:51:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1d1ed962f2c3b3101433906b6b71e395","sha1":"323b3ebdc78e3e6f9581706771cbd61bfed318a4","sha256":"2de2499f4e5f896995ee7ebaa527a39b75f520f98e12110ec6c156a2433dbe75","sha512":"5fafbbe993daaffcadae26c8db453bf195c30dea475dccdfa89166f58bb900004a81e21ca42ce1c61f8a8c85587b4d934a953082a1fb1a5256eb9502fcc92883","ssdeep":"","tlshash":"d6c08c67351e3c0ce7a322b422c36aa0d08bd3b088da1a10c640025331c31278ac7315","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-08-16T09:06:22.846413Z","times_seen":2220,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":66,"dns":0,"connect":67,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"pan-swap-finance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"pan-swap-finance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"pan-swap-finance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"pan-swap-finance.com/favicon.ico","fqdn":"pan-swap-finance.com","domain":"pan-swap-finance.com","tld":"com"},"ip":{"addr":"91.92.241.204","port":80,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://pan-swap-finance.com/","date":"2026-02-01T18:51:16.959Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pan-swap-finance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://pan-swap-finance.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 01 Feb 2026 18:51:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1d1ed962f2c3b3101433906b6b71e395","sha1":"323b3ebdc78e3e6f9581706771cbd61bfed318a4","sha256":"2de2499f4e5f896995ee7ebaa527a39b75f520f98e12110ec6c156a2433dbe75","sha512":"5fafbbe993daaffcadae26c8db453bf195c30dea475dccdfa89166f58bb900004a81e21ca42ce1c61f8a8c85587b4d934a953082a1fb1a5256eb9502fcc92883","ssdeep":"","tlshash":"d6c08c67351e3c0ce7a322b422c36aa0d08bd3b088da1a10c640025331c31278ac7315","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-08-16T09:06:22.846413Z","times_seen":2220,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-01","alert":"Phishing Block","trigger":"pan-swap-finance.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"pan-swap-finance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"pan-swap-finance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}