{"report_id":"28a4e12b-45a0-4c82-a600-f397e64f52f0","version":0,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-07-12T19:44:32Z","url":{"schema":"http","addr":"kyberswaps-apps.org","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"172.67.210.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kyberswaps-apps.org/swap.htm","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"title":"KyberSwap - Limitless Access To DeFi","dom":{"size":224723,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23000)","md5":"b2b5e04a4487b3907dfffed702b29606","sha1":"21f79cdc901fea78e12c907ac1e5b503c2481acc","sha256":"de7e43a7797e760d8e4489ee9c110b713ccc1610325614881aff26fd250dd3fc","sha512":"9234b5f55759c1d09f285f3c1e4c0ee92666f325571a82ac40109b6a81e614291aa99254db64cfd8a6feca96d853ba20d76f930fb5119a38f901a4e2d1251a15","ssdeep":"3072:GPv396mO9RUqJ0z6gvjMfpyPk57K5X6YR:GQmkUZz6gvjMfg5B","tlshash":"3d243cf1a390a0febc2b47b5e225fd6c720664b6ef714bc8f1b8969047c1eda4c16950","dom_hash":"domhash6caacbfad62d146133cd153ba7fc92ec","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kyberswaps-apps.org","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"172.67.210.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T19:44:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":1,"received_data":1185997,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kyberswaps-apps.org","ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-02","domain_rank":0,"first_seen":"2026-07-10T09:06:23.655521Z","last_seen":"2026-07-10T09:06:23.655521Z","alert_count":60,"request_count":20,"received_data":8858594,"sent_data":10366,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"kyberswap.com","ip":{"addr":"172.66.170.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-19","domain_rank":94500,"first_seen":"2019-02-01T06:32:22Z","last_seen":"2026-07-10T09:06:24.246174Z","alert_count":0,"request_count":1,"received_data":20457,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"dre-remout.pro","ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-04T07:51:56.937274Z","last_seen":"2026-07-12T17:17:07.683339Z","alert_count":0,"request_count":4,"received_data":113858,"sent_data":2176,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":25420,"sent_data":607,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-07-07T01:27:15.35768Z","alert_count":0,"request_count":1,"received_data":646,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@1.10.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e131238273584c83b0089668cf50b1c","sha1":"a0e353e006c1ce398cc28b065c9e2754f9f6d655","sha256":"8cdcd2aa68c68480d5180ca0cd64f190c7064fdecff596ea34042eba5ff181db","sha512":"1179354c1ad3d530be6a372bf1cf8c71584616fe31008fbc9be57b4f83f04f731d600bf8ee3922ae57934d987c205b51bfdd19b4a3ce93fe09253194690f5de9","ssdeep":"6144:O/QrM70NNb2ki3aT9lWCNvmsIAAvkNS98bKwTlC1wr5ndZYTXLpg3jvLJvyzzWaO:OIrM7xkr/WamsIbcvbKunDYn6vU8","tlshash":"0c45f9c47691b095c3a25ad1446fd00ae33dfd647c8c4169bb57ecf32ca8a89512bf3a","size":1184878,"data":"","first_seen":"2023-05-12T17:02:00Z","last_seen":"2026-07-12T19:44:42.67509Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-13T13:17:51.504926Z","times_seen":394764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/w-modal.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-13T05:36:53.081156Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/w-loader.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-13T05:36:53.076235Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/modules.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-07-13T05:36:53.122386Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/main.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"058f8d2c13f022d67b732c0f40d1ed3a","sha1":"923c96c37a48e82f4ab05e9123b3a6ee91edfb40","sha256":"a218fe52692f5dbf25e440c00bc4542498a5d147d7bd950b3a3a20a76b5dc6a1","sha512":"fa6ac010d49a37584c37639a4d95c8f1efe25178d7d1bd4e2734973a68220aa065a977803c084ed125e97f9ec447da04f2d4467e513badbbb60620d6e614455b","ssdeep":"3072:cZW4l9perg28wOX8H2rjmcFVR7IrB+604XJUNFn:cvperg2DH2rhFhF","tlshash":"b344c79865fb443c805b346d5a5f61007834f287708cddb53abd8921afcdda4cae2bad","size":277157,"data":"","first_seen":"2026-07-10T09:06:31.104246Z","last_seen":"2026-07-12T19:44:42.670619Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"NetworkError when attempting to fetch resource.","filename":"https://kyberswaps-apps.org/assets/main.js","line_number":99,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@1.10.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.969Z","timestamp":1783885439969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/web3@1.10.0/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 306235\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.10.0\r\nx-jsd-version-type: version\r\netag: W/\"12146e-oONT4AbBzjmMwosGXJ4nVPn21lU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230141-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3492084\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FsvLu5G690il2%2FUeRX19rf7jx74x1gz1BRXYNmd9cvbc1MZ7%2Bjp8%2FIkd7kDmFr1JA3EiN5pUq5PNz1ucpxl4AGyMKjuUALJzUeqacnAXzEnpJVaQQyswb7EzOp2mW7bpcNA%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1a28a4009dab1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1184878,"size_decoded":307354,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"d37b2a59a14a61b87878e711a84b61b8","sha1":"6cfc4156cfc57c1b80575c0500ff23a8ebaf138f","sha256":"b373e98462cf00b9307cb622f54dd317f4d6d607bb222edba86f9e6dc9e53fd2","sha512":"2bb491e0f551d18163e56b01dee786e0a5a897952476da5d69bb1389fd567002d6a28270ee807abf58781cd4afe3e66b65a2389f26c2f379cd6e9cc2e77dc894","ssdeep":"6144:O/QrM70NNb2ki3aT9lWCNvmsIAAvkNS98bKwTlC1wr5ndZYTXLpg3jvLJvyzzY:OIrM7xkr/WamsIbcvbKunDYnk","tlshash":"9625e9d47291b065c2a25ed5402fd00ae33dfd687c4c5169bb17ecf72ca8a89512bf3a","first_seen":"2025-08-07T13:48:42.705858Z","last_seen":"2026-07-12T19:44:42.657535Z","times_seen":76,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":6,"receive":7,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/w-loader.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.979Z","timestamp":1783885439979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: W/\"6a463d24-a2f4\"\r\nx-ray: wnp68428:0.002/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oKZJMCrfsSWtf%2Fji7hvEFgpcXArryjqowHSUDE7H4KWmw6MsZ9jZ2E9uYqObALhrdgzSHDHTtoGxgaVgBBK0lfWi6b%2BSmvDzYrHqOi8wSUpoZyz5vaL4rE%2BAA6Lq3Fv4HmpB2np3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3fea3e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":7910,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-13T05:36:53.076235Z","times_seen":389,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/modules.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.981Z","timestamp":1783885439981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: W/\"6a463d24-5d1a20\"\r\nx-ray: wnp68428:0.030/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvWPrwDUhP0uwATaN%2BvpBymQFosgYng6XimfRzJYziMkLWNLHQb4D%2FbfGm%2BAi76dJ%2BzVNVeydYcQlQetqLeck%2BIdDvnNgajop51MIJnsRX8TUWmcZtamC%2F4EKnkARQkakV3mYkcz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3fea3f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":1880969,"mime_type":"application/javascript","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-07-13T05:36:53.07716Z","times_seen":159,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:00.348Z","timestamp":1783885440348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: \"6a463d24-c48c\"\r\nx-ray: wnp68428:0.001/wn68428:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vY6OoKZ4Fmdnic6%2BCzR4tD9zGL%2BNlypQ41WVQ7a4eORieHX2ySKqStMVtnTOC0L9ZPwEnMhXO0B38a3bbbWjcqhNyo93ZhhTXZ35XVNNy2fUCowLewWX2bW16HE1MDke5t9FZKfo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a423a6d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51047,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-13T12:48:05.456163Z","times_seen":22402,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswap.com/favicon.png?version=v1","fqdn":"kyberswap.com","domain":"kyberswap.com","tld":"com"},"ip":{"addr":"172.66.170.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{4890db2a-64ee-4f19-9cee-c5f3dae21020}?https://kyberswaps-apps.org","date":"2026-07-12T19:44:00.466Z","timestamp":1783885440466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 May 2026 22:30:29 GMT","end":"Wed, 19 Aug 2026 23:30:27 GMT"},"fingerprint":{"sha1":"03:30:0E:A9:9B:23:EB:CF:29:80:28:3C:05:AF:21:44:90:FC:18:EC","sha256":"C2:28:8A:2D:D0:E6:05:2A:36:A5:F1:A7:36:2E:F1:86:63:CF:D2:B6:9F:6E:32:50:D9:79:10:FF:A3:C2:56:8B"}}},"request":{"raw":"GET /favicon.png?version=v1 HTTP/1.1\r\nHost: kyberswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 18934\r\ncf-ray: a1a28a430db4b1b8-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1682039\r\ncache-control: public, max-age=2592000\r\netag: \"6a3897d8-49f6\"\r\nexpires: Thu, 23 Jul 2026 08:30:01 GMT\r\nlast-modified: Mon, 22 Jun 2026 02:03:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors 'self' https://platform.alphanomics.io https://staging.alphanomics.io https://alphanomics.io https://thesonicgoat.com https://app.safe.global https://dexscreener.com https://dev-app.telifi.xyz https://stg-app.telifi.xyz https://app.tobiwallet.app https://coinsdo.com https://*.gurunetwork.ai https://basedbrett.com https://www.basedbrett.com https://web.telegram.org https://safe.berachain.com https://testnet.berally.io https://app.berally.io https://dex.guru https://app.gains-associates.com https://new-gains.netlify.app https://gains-associates.com https://arbitragedash.xyz https://arbitragedash.zapto.org https://daos.world https://dhedge.org https://app.sectorone.xyz https://app.swapline.com https://chamberfi.com;\r\ncross-origin-embedder-policy: require-corp; report-to=\"default\";\r\ncross-origin-opener-policy: same-origin; report-to=\"default\";\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 0\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":18934,"size_decoded":20457,"mime_type":"image/png","magic":"PNG image data, 750 x 750, 8-bit/color RGBA, non-interlaced","md5":"a5a0046ac66ed0ed6e957d4c88f87648","sha1":"8f1ce4fb1da9ef674ee7bd20f823b2d48c3c7f95","sha256":"b414fc61c811fe626f62527a7a204f890a70168c41d50650b88341e6eeb9dbb7","sha512":"477416f4649b76326256541d1d6d07fddbad8f5625bdd2531a0ba32ed8fdb89eef6d79d11ad6a6ab8305c23835cd0c71128076a9a44ed2098181d509052f9130","ssdeep":"384:vgJnTYlzID3ZGhANM7r9MJciu2b2xKFOeSAcsLFw8688/zdZNTp7gL5:IJx2ry42XFOlAvF68Yz7m","tlshash":"16826cb9ef4098fca499e050f8c5570f6ba338934392a083f97b0d5a45a3ff705622a1","first_seen":"2025-05-26T12:25:42.262827Z","last_seen":"2026-07-12T19:44:42.660532Z","times_seen":29,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":8,"connect":1,"send":0,"wait":20,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/images/image_3859a6d4755469903cf599858048e73283f69246.ico","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:01.180Z","timestamp":1783885441180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /images/image_3859a6d4755469903cf599858048e73283f69246.ico HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:01 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a463d24-3aee\"\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nq5GcFb0OVRx6ON0KKpFG5Oe2G6ZgfgQi7bblaD2xEPyVLmk4DfWFTysWiRhAst1%2FbOOTzKOp4YQb9YcYQxW46dwG5gO74Qo%2BQPIAuLILyOC8jA2ieFUZte50IezWDcCeIWuNn80\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a28a476ada712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":3136,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"4973bd611d08de1b60cd91c586bb8b07","sha1":"3859a6d4755469903cf599858048e73283f69246","sha256":"f6d7868c3585b58b5c51155c396df140072956434e19103f9eb9d8ec7cd1d4ae","sha512":"50e06e2f0270816ed291d1000432cfcd66edc61113b2b8e94f589086a7ffd8bb5edd18da5f1f64e67a5de5b795d1f25ab0ac4dd43fdaa9773deac892619cd3ae","ssdeep":"192:jZPTVFDCLcy/5rViXKn1DNOfhrVh6ys8T:jby/51a37","tlshash":"b462fde49f52f4b4c8890570ec6409828e393cfba964741506e87fc33ab26a5fccb975","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-07-12T19:44:42.661172Z","times_seen":45,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dre-remout.pro/","fqdn":"dre-remout.pro","domain":"dre-remout.pro","tld":"pro"},"ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:02.042Z","timestamp":1783885442042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dre-remout.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 08:08:28 GMT","end":"Tue, 29 Sep 2026 09:07:00 GMT"},"fingerprint":{"sha1":"7D:3F:8E:9C:F0:9E:98:13:34:1D:E0:B9:72:53:50:5C:D9:CF:44:19","sha256":"63:68:69:F0:3B:9D:00:56:CC:64:4B:89:36:BA:98:BC:60:9C:3A:58:17:5E:00:0E:8E:C5:E6:A7:74:CA:F0:95"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: dre-remout.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kyberswaps-apps.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1521\r\nOrigin: https://kyberswaps-apps.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1521,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"f1a8-lScxV9wNzznpHXzD+gcewRZteo0\"\r\ndate: Sun, 12 Jul 2026 19:44:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNe24%2BDSB5ClWH9etkCzQMSK0kA5AU9pGCWT6HXsw4KduZuKuGbiQ05GKr6o6x09C%2BjYNQ88b%2BPEt41noQWz%2BAzviHLp%2FtwOaQijnH1BWGSCLBPHpqWRx%2FdOBIqUO90iOw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a28a4ccdad4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61864,"size_decoded":5294,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (61864), with no line terminators","md5":"ac5658d364f085c83fd64aac710e0329","sha1":"95273157dc0dcf39e91d7cc3fa071ec1166d7a8d","sha256":"35288a5698ba344d1f24621a5b25c03183ec5a4a4f6ecafe55409c05faf6421c","sha512":"60813d2a12955f2c1cd85be9eb7b9bdfd37baa21a11e95113a800218691ded9ef0dd7c35efe4f20616661d5a6ef9912604cf8a3c1eac95425e2b29107e4ec418","ssdeep":"768:/xpcpdPi+jWSmXxoXgpr2/tUz8QRclLSIQeQWJfyiOnXs4EMUDUQLL41iBZATycu:t8P","tlshash":"13536b51a5a979d0825ec8adaedd97360b4386f41c7fd62407061e4b1be2f92c7f00eb","first_seen":"2026-07-10T09:06:31.09859Z","last_seen":"2026-07-12T19:44:42.661876Z","times_seen":3,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/swap.htm","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:43:59.440Z","timestamp":1783885439440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /swap.htm HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:43:59 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2Fue4mpkUmfwojNxbwxKffjI8qdmOP7Cx8mtWlmHUsw0CGwiZxZrpF3jK%2Bf0Qd0Zo3CCE11LVqEF8W2x743PzePrvv1jZMmR0bE71MqsSoqjldiUpoZuZXm4jhHupcz4z3sU5sGn\"}]}\r\npriority: u=0,i\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a28a3c89fd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":184421,"size_decoded":53959,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (43015)","md5":"7cfd3f156e4f801176d8b7a5b16d4700","sha1":"48cddfaaad046c153768aa584e63cb2656c77a38","sha256":"5f5c83c688151ac313a681cd37605760d05e7eb27843dccff04ea9f52065dd72","sha512":"a1afb6a7fdc04bb2ce7a1cd76f9d7c40d52ec3fad6dea19a37ceea307aa3e3e5c713b041cdd6cfd5bbcf069018d407ecf7263aad328698c846c482ebf6032fd1","ssdeep":"1536:V9mz914zExY1AmqaDwcZGVsbGMlwDE5Y1oWxmxm19zZJ5bHYSZz6gvjMMcpyPkwC:jmjmZG50gJJz6gvjMfpyPk57Ky6Y1","tlshash":"a4042af2a394a0fdb81387b4e139b97d720b74b6ff654a84f6ac5b9067c09d64c06d80","first_seen":"2026-07-12T19:44:42.662478Z","last_seen":"2026-07-12T19:44:42.662478Z","times_seen":1,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/images/image_d44513d8c226023704219c7277c0cbcb85c9f202.png","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.994Z","timestamp":1783885439994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /images/image_d44513d8c226023704219c7277c0cbcb85c9f202.png HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: \"6a463d24-2654e\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Odk1qPeN%2BMYsH8X%2FskwbQslA9G29%2FNmTaAmPCWIAPhcXdHDDxxYIXurxZVQPBGU3LvE72i1vAPhJtVkSq8bk09AoPnjlLC9EioCN%2BomK3PC2%2BXyO72UsALRo6bx8z6hdUKb%2FeWoh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3ffa44712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157006,"size_decoded":157743,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"9ea20b632ac76b7a1c5fd9227d5993a4","sha1":"d44513d8c226023704219c7277c0cbcb85c9f202","sha256":"106c85eb541b76bdee4c38e37f7a3b3fddfd26db55a4fe9c44b50d28edc05561","sha512":"206e7c7c388158d4d1a54a58cf0740546aa68bfdb4e5a5ec1cba8712a1263e2fa6661474360def33913da879a698a57e16f4c9b62c2172bbdab5ff20530c3aa5","ssdeep":"3072:7sighxkoLA2iXFXU+TJnm7zlimtLWcuVDp2zpSDTDHqv5LPIvyqSW:5KxkL2snBoAsHubb/eBy31","tlshash":"f2e3f18b4e7a0cf0f2609eb89deb2a4976e905fd42386d134379d060bc4d74974ef686","first_seen":"2023-09-23T00:34:54Z","last_seen":"2026-07-12T19:44:42.663392Z","times_seen":27,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/ethereum-989041d8.svg","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:00.365Z","timestamp":1783885440365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /assets/ethereum-989041d8.svg HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=5,i\r\nx-ray: wnp68428:0.000/wn68428:0.000/wa68428:D=2064\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkBPLVVhIzAe5Qe6OPjVccfspDJNBsEjbR6Nk9e0rVitFod%2FQW1GKoSsIuYC5GqEpSm%2BEBsifPVPTXkl9Syg9W6oNHthCXgaCY20smwcz6TyDzRkkDHkSjwn%2FX8xCVg32KodoXyc\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a424a6e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3812,"size_decoded":2121,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"93a5c5dfbe4d163cc191c1b139ddd356","sha1":"77a92e094cfdc24341d75ff1de75643820f2f2ae","sha256":"a4f2522a3f2d7f415a5f2349d01755816f5522d046356743cfdbe1673304edbf","sha512":"1f26effef031f6e6c8dddd9dabfcb334c5ea9090377eb081a39d6f935822c99ca1aff0c13f9bcbb9e59e37de56921e75877f8990737eb318d0761ca1533c037a","ssdeep":"","tlshash":"a171329b06eb811d6023916f3b9d7301b8a2863bd75bfc253d4e8358afcd44a40e279c","first_seen":"2026-01-18T10:52:03.855468Z","last_seen":"2026-07-13T01:41:25.291608Z","times_seen":115,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dre-remout.pro/","fqdn":"dre-remout.pro","domain":"dre-remout.pro","tld":"pro"},"ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:02.247Z","timestamp":1783885442247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dre-remout.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 08:08:28 GMT","end":"Tue, 29 Sep 2026 09:07:00 GMT"},"fingerprint":{"sha1":"7D:3F:8E:9C:F0:9E:98:13:34:1D:E0:B9:72:53:50:5C:D9:CF:44:19","sha256":"63:68:69:F0:3B:9D:00:56:CC:64:4B:89:36:BA:98:BC:60:9C:3A:58:17:5E:00:0E:8E:C5:E6:A7:74:CA:F0:95"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: dre-remout.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kyberswaps-apps.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1585\r\nOrigin: https://kyberswaps-apps.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1585,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"28-LNKC8g8gszGD5V9ZJSIGoFND3f0\"\r\ndate: Sun, 12 Jul 2026 19:44:02 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJVzEwO9a%2BG%2BIuOFnaZ4ScHri%2Fd5o9c7zkvvarY2ZdZB1IY%2FYjianjmtHatK8S8tF3q0mNxbRY6fZxniTkh26eNtx5CAPNfM6sF5qK0ClN9OMT52lEfCYIxLNZJwsdTcVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a4e0de64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":40,"size_decoded":727,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"609ca0648d52fcb63c09d479c7d28c54","sha1":"2cd282f20f20b33183e55f59252206a05343ddfd","sha256":"0a71c39d6362311f890b06e0b36f870000bec8940bfa00eeae5d7795ef3fe266","sha512":"76ec487ff0b09025a66178cbd75bb53ecdbed185ebfa81ed54a13041f87b4f94a4199846a74891f6f265f09aaea948ecaf3c91aa485138edc4a8940050bcc526","ssdeep":"","tlshash":"c49004c5f00514f450054c157545d13d00405170105c4d40170404111dd1f0c451c073","first_seen":"2023-10-29T07:32:49Z","last_seen":"2026-07-12T19:44:42.664899Z","times_seen":12,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/images/image_6a92887e90fc042ee2e4d0fb3854692beeaaf19a.png","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.995Z","timestamp":1783885439995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /images/image_6a92887e90fc042ee2e4d0fb3854692beeaaf19a.png HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: \"6a463d24-1765\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4o%2BeJGJ3tNtANLVFOS%2Fe65CwU08D%2FFp%2F5tFCTFQch%2FuRvDo54FnJmjARxI%2BeIXYFpqMXyVCX905%2BVUrFzKsiPwp8IbLFPr1kPm%2BnuO7cjEoOUWpEZN1nKrGNbbIGMQ43EkSm40f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3ffa45712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5989\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5989,"size_decoded":6727,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"61e20ad43bafe0ca2b7ada87f1792a4c","sha1":"6a92887e90fc042ee2e4d0fb3854692beeaaf19a","sha256":"32076120b7bde0202fda306280a9df7917a5ab1a396d4a87db012930f8bbb7b3","sha512":"abeffc786faf67c9a0dc178b0ffb8aae7fbac541765952a55129645914ee52f51ce0e09a753442baa6b984560aa51933a5d24179f1befe1ccf521ea4d5763f2a","ssdeep":"96:4MEbD/XFc+Xcwyn/s11yjmNrD9zNoqtl9QNpvRq3TS+0wv2yb7f+5djnLprn:4rfepwy21yjY39Jzt7QNpvYOe+yb7fe3","tlshash":"a1c19dc0d974348607ab31e946f645e4b26a5f2059329bdf95bf32b1c633336d742103","first_seen":"2024-01-07T14:24:30Z","last_seen":"2026-07-12T19:44:42.665439Z","times_seen":35,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:43:59.208Z","timestamp":1783885439208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:43:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nx-ray: wnp68428:0.000/wn68428:0.010/wa68428:D=2210\r\nlocation: /swap.htm\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSpW2JERHtIWLnGcrrUz%2FnobnXCQcSADmYSKo4V222gk1Hnjo0cTRbhRnkkn6MhidBzYMpgTM4MyezH6GgMZYz9MqFemTDi2VySs%2BymawapXQYbKvUayhp2QI8P%2FNRhDBauDoyMM\"}]}\r\ncf-ray: a1a28a3b99f0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T13:17:51.40421Z","times_seen":17213533,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":58,"connect":19,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/style.css","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.966Z","timestamp":1783885439966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: W/\"6a463d24-30e5d\"\r\nx-ray: wnp68428:0.010/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3IUgqsLgKsKaRLrQQmZHb7cVgGKt%2FI6sgrn35J7dmnHGSXTQT%2BtEdTsKKmFNQmObHKDr9Pblb2sFVF54s6J%2Fyz5hD2din2A5uQhJUKjn5DMc7FNMd815gULKTj%2FrahYxfNw%2B5Bm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3fda3a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200285,"size_decoded":29670,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f5e07655379a960ef4a2160560861197","sha1":"0d304da5547f51812eb9fa57f76c4a250b72741f","sha256":"9b90dacdc6374ca4928a981d2181d0ec6a67c64620aa3d8ba66d9b90f744816d","sha512":"76bb4ccc548613c087b06273d053fa45e7f5d7236ed4ecb69cac29a24cd75006e281ddce7c06f9bbeff9fd33f1504c175167d6fbdd18ea4d6867bf86c36bb3a0","ssdeep":"3072:6B1P+lk4Kh+iDqr/ZA7kjjD+1JSU6JFlO8:6B1Pck4Khfqr/ZA7kjm1JSUOlr","tlshash":"dd149314be9a116d7e134e27218eb9c87c24b444c732079aed36516d9ac2cfe2af375c","first_seen":"2026-07-10T09:06:31.108917Z","last_seen":"2026-07-12T19:44:42.667115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.974Z","timestamp":1783885439974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 14 Jul 2026 19:43:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34E4lU%2F64e3UPuSRA%2BsfAN766%2BETV2cdEQbL9ncJpz%2BkhOD%2F6n%2F2GUpJpJZxDnhBuf8ig3TDuAKTJsfHXQnjVFXB0zwfZJSicYljjQgvb7mRkHBwjS%2BnYwGnesxqkMKTpbV5s5du\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 19:43:59 GMT\r\nserver: cloudflare\r\ncf-ray: a1a28a3fea3b712a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-13T13:17:51.504926Z","times_seen":394764,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/images/image_64ad3822e72417845dd513f5c37f061afb1c19e9.svg","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:00.005Z","timestamp":1783885440005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /images/image_64ad3822e72417845dd513f5c37f061afb1c19e9.svg HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a463d24-41a\"\r\npriority: u=5,i\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuU54dWmuiItYFNM0UdQyEgx4x460CMFmJ2%2FdVTMckm%2BKeWGYNvug8mmU3JSH6iwb6nwbXviYPaoDtAdlVgniXLDREbva6%2Flm1fAkophdq9Unxc7fXH9xEwwhKXnMU8zmVwPIF2v\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a28a400a47712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1050,"size_decoded":1300,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cc37b6f6f1a4d6929b08daf7e4c9918","sha1":"64ad3822e72417845dd513f5c37f061afb1c19e9","sha256":"ccc0d6bf9db586a5b6d1a8c2c73b9f2bd8ea133b5674ca661c58ec0e04ed536c","sha512":"41e0323444c4f02e4b4da438f1245bc589f2dc6e951f7a349c798c3b3f35670da5c9e67fc3838746d33e631174ae43b3ab89b7210b88ab313585da44f954a148","ssdeep":"","tlshash":"f411929ad7a75b34755a4210cb74a5303ba264bf5020f6983eef6620bf159b0508617e","first_seen":"2025-09-26T20:57:34.681272Z","last_seen":"2026-07-12T19:44:42.668648Z","times_seen":7,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:01.515Z","timestamp":1783885441515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 19:44:01 GMT\r\ndate: Sun, 12 Jul 2026 19:44:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":1773,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-07-13T05:36:53.078041Z","times_seen":137,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":67,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/w-modal.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.976Z","timestamp":1783885439976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: W/\"6a463d24-9307\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FwS5yTa3FiAr26qrVfCc4KjX8se7lnFW5fGOhnIoz9zFoa%2B5aydTkxcCFURXXiZvGYxr52eu0%2Bi%2B4BYOJ0XtAU%2BcU2eYj%2BRvHVPKYeIHEv%2BsfQnMk1%2BbNBwMFbXLjNBb9mKQIzkP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3fea3c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":11197,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-13T05:36:53.081156Z","times_seen":197,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/ethereum-989041d8.svg","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.991Z","timestamp":1783885439991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /assets/ethereum-989041d8.svg HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=5,i\r\nx-ray: wnp68428:0.000/wn68428:0.000/wa68428:D=2064\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjYV4hneNB4T8Iu1QhNk%2Bi34iJwplVPbodt0Ky1BoUNQW%2BuWQLHJ9Jz0QDvWpfdQqhRztf8mGj8wN0MRf63x%2BPx9J0TofOhYzPaVDu4xIysLE5j%2FPbuOKdkDEL4dJPGbI9bCowRg\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3ffa42712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3812,"size_decoded":2116,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"93a5c5dfbe4d163cc191c1b139ddd356","sha1":"77a92e094cfdc24341d75ff1de75643820f2f2ae","sha256":"a4f2522a3f2d7f415a5f2349d01755816f5522d046356743cfdbe1673304edbf","sha512":"1f26effef031f6e6c8dddd9dabfcb334c5ea9090377eb081a39d6f935822c99ca1aff0c13f9bcbb9e59e37de56921e75877f8990737eb318d0761ca1533c037a","ssdeep":"","tlshash":"a171329b06eb811d6023916f3b9d7301b8a2863bd75bfc253d4e8358afcd44a40e279c","first_seen":"2026-01-18T10:52:03.855468Z","last_seen":"2026-07-13T01:41:25.291608Z","times_seen":115,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:00.408Z","timestamp":1783885440408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: \"6a463d24-c48c\"\r\nx-ray: wnp68428:0.001/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEXo3yr9VeddcE0N6NFVHWsPHV2odvCXn0N6J%2FOpl5H%2FTSxk740svK5ZfkvyJIHsBWpPCL0JoVUQqxmnUFnCmMq2obnOSzNNAPjkWVT41LTjXcfYlegHK%2BObB8fRjjwifeDuYxqf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a428a7c712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51056,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-13T12:48:05.456163Z","times_seen":22402,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:01.503Z","timestamp":1783885441503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 21:09:40 GMT","end":"Sat, 19 Sep 2026 22:09:34 GMT"},"fingerprint":{"sha1":"BC:5D:BA:6B:85:5B:AB:6D:AC:FA:AE:08:60:30:D5:B7:00:DF:7A:6D","sha256":"7F:4B:1F:9D:6C:9D:C6:6E:72:31:02:D1:AA:6A:28:51:EB:2B:06:FC:E9:0E:A3:03:26:25:FB:13:6A:CB:51:4D"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kyberswaps-apps.org/\r\nOrigin: https://kyberswaps-apps.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\ndate: Sun, 12 Jul 2026 19:44:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 273\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a1a28a5d096076ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":646,"mime_type":"application/json","magic":"JSON text data","md5":"817fe0f750fa91ac954b06a6e179f676","sha1":"651023a67e8786f8c7a63d323d81512687d851f1","sha256":"e54a34359ebeb4245031b742ee300e3fdd72ccf608d481d57caca1fc16147f17","sha512":"b6f4a24f4e9fd1ad99775fcfddc5311c09b8a77a3fc53798f1918b49fe87efcf1063aca6f4c9b63bb0d60d87d11bb5d0ff6223049f30b58d8013b642f33b6109","ssdeep":"","tlshash":"87d012f75585191b2b3743567068a8ace8d3888d99416447957d4364a28cd39128f21a","first_seen":"2026-06-09T22:35:40.080024Z","last_seen":"2026-07-13T05:36:53.082724Z","times_seen":31,"resource_available":false,"data":null}},"time_used":3140,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":4,"receive":0,"ssl":3132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/assets/main.js","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.982Z","timestamp":1783885439982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /assets/main.js HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: W/\"6a463d24-43d34\"\r\nx-ray: wnp68428:0.010/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmH2HIR58sZgX8Ks%2Fp30o8WniioDAnQnzRqBEnTrttTkgVhU4%2Fyt8JLj1%2B%2BosbaT2%2Bebjed35zM7fplBDQgHW1Y6mh7PJvic0kocY973LjxW9CHYV63yTNURZOzfaRstEI2hkwkl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3fea40712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277812,"size_decoded":35332,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (4614)","md5":"058f8d2c13f022d67b732c0f40d1ed3a","sha1":"923c96c37a48e82f4ab05e9123b3a6ee91edfb40","sha256":"a218fe52692f5dbf25e440c00bc4542498a5d147d7bd950b3a3a20a76b5dc6a1","sha512":"fa6ac010d49a37584c37639a4d95c8f1efe25178d7d1bd4e2734973a68220aa065a977803c084ed125e97f9ec447da04f2d4467e513badbbb60620d6e614455b","ssdeep":"3072:cZW4l9perg28wOX8H2rjmcFVR7IrB+604XJUNFn:cvperg2DH2rhFhF","tlshash":"b344c79865fb443c805b346d5a5f61007834f287708cddb53abd8921afcdda4cae2bad","first_seen":"2026-07-10T09:06:31.104246Z","last_seen":"2026-07-12T19:44:42.670619Z","times_seen":3,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/logo-dark.svg","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.988Z","timestamp":1783885439988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /logo-dark.svg HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=5,i\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: W/\"6a463d24-2d0a\"\r\nx-ray: wnp68428:0.010/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69Pe6zEFpT1RY42eUrny8IpA3pyeAAukmjlLnAcUMs5957HjyTA1hR%2F%2Bb0G6frW9CBVrJpu5uUDJ7sJcyyhOSj7Ui3QXlzfIklLuCOe4Av3Id7hWEwZz2JJM3llZPPbHYolbc0iE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3ffa41712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11530,"size_decoded":5696,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1e97a70a4526e877c271ea0e1c7872c","sha1":"4c977dd6993134311a58766c8765245f546f840a","sha256":"68f4ac53c4d68c54934a4620e605d9e190040bec7736487765225cd2e318810e","sha512":"761b7d00bc2ebead6c026850d043c95d54b4087488bb25a8f25a3838901282a9a8e6b360d7c7dae5ba48ecf4ffaf504b44cf98a9afd57aae0e145d9181756067","ssdeep":"192:hI+YuhJUKu168eQDuzbiuPijpcrn4A3Gh22z5PRo4ckhGQnzcuV2lv/ogonImXtL:W+tJeJexHiTcLl2z1q4KQouV2p5mZ","tlshash":"0332d5cdaf648af4e081e3f5c61794bd7a9a9dfa7a50c47cc7f50d12a49245e8902cc3","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-07-12T19:44:42.671497Z","times_seen":39,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/images/image_f9a89309caff2f438ad6bd931392e1dcf52d3172.png","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:43:59.993Z","timestamp":1783885439993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /images/image_f9a89309caff2f438ad6bd931392e1dcf52d3172.png HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: \"6a463d24-191120\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NKwjuRKlTWP0OVgcT%2FihO03jHfCOkK0QiPcaQqAaa9rB2%2BTuBmmsF01ASUsFmo7zKxEHpeS70BkFv9Hqr52VcW8hSecxQDMRT%2B5%2BGPvCaWdoNjyBF1iVZtd4U%2FMsASk3wqP6PLz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a3ffa43712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1642784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1642784,"size_decoded":1643521,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"e52b0ef49b19bef04b18ca323b7a10bd","sha1":"2592f8ee91c3c91ce911dd5021a4e1decaa45bec","sha256":"0b90b8fec8136657159a2fb0c7e5f57d249468caad021953ea27e6fb991503c1","sha512":"e431ac06bc57ce317adef9da1cb4e2f2178f9a652e7a53f3eb37efdac2d7455f4d7980cf0bc504c92e3e5b9b15e7917138b21249699f92d30cb4da81192681e4","ssdeep":"24576:FqKwlW94c4u3VDCa706FNPIJWEoJ4sq3TTPP/B2Z1myIhY67:F1zxV50OIFoJXqv/o1tK","tlshash":"d82533464df8793bf08b757d2908c874e8da64c02fdad2c30416c8ba3a6dfa6546b7d1","first_seen":"2026-07-10T09:06:31.096953Z","last_seen":"2026-07-12T19:44:42.672061Z","times_seen":3,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/images/image_2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2.svg","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:00.004Z","timestamp":1783885440004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /images/image_2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2.svg HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/swap.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\npriority: u=5,i\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: W/\"6a463d24-1d79\"\r\nx-ray: wnp68428:0.000/wn68428:0.000/\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIva0aCvznneUTwbuyJsvlyp2kuzl0Jq8iQ4mrrZtNzAsq6dJtUr0cuBW73n0DmV9EcDkj8GJ7nv24PfNQFsIH887RlF4p8b6AitrGd1Ukj6XiAms3Lsjnj4b3VO%2FtuQ2wj7RvkY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a400a46712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7545,"size_decoded":3011,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2dda438a79618571ba17f8259517a1ef","sha1":"2b9454e06f9a2f8b5e98d6f143937d93dddfb0d2","sha256":"4f69185e7a28cdf58cfb0ae430f34ae8622a18b31d35b414d3b9d48d6a223a05","sha512":"ee87ec6f82e01d76fcbafc3a3ae36dbd4e9f8e19b4257ca46d47d0d68677dad83a3ee8b62242ead7373c82c873919141a2a923800d0b5ade775d56b0a10b00f2","ssdeep":"96:gAkFjsfuvjgOApylYgAmEoUGt9JbCJ4T9xqe0RJCa/MGCsalEMxhH5H:zkFsavS7Gt9xsZEGCsWV5","tlshash":"36f162e183fc6ad4f01497ccf755307874156aab5f4146a8f53d0fe8a7820aa887f8c9","first_seen":"2023-11-04T20:35:40Z","last_seen":"2026-07-12T19:44:42.672914Z","times_seen":32,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"kyberswaps-apps.org/fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2","fqdn":"kyberswaps-apps.org","domain":"kyberswaps-apps.org","tld":"org"},"ip":{"addr":"104.21.77.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:00.410Z","timestamp":1783885440410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kyberswaps-apps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 09:29:37 GMT","end":"Wed, 30 Sep 2026 10:28:01 GMT"},"fingerprint":{"sha1":"CF:21:74:50:49:CC:FE:1F:09:40:C2:3C:50:04:01:6B:25:5A:44:55","sha256":"07:0D:B0:FE:9C:23:B1:4E:DC:E0:86:F7:38:59:2A:1E:A0:01:96:69:6E:F0:EB:1B:2A:D3:97:94:5D:24:4D:20"}}},"request":{"raw":"GET /fonts/font_9eaf3fe571af16f72a84dbadc1fce0128dff4486.woff2 HTTP/1.1\r\nHost: kyberswaps-apps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kyberswaps-apps.org/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:44:00 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 02 Jul 2026 10:27:48 GMT\r\netag: \"6a463d24-c48c\"\r\nx-ray: wnp68428:0.001/wn68428:0.000/\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6ssrtu4VmbyN9ThIwzBCyDm5RknN0VM%2BgeC3Car%2FAyCzvBNmAYDgDqdqIPul%2FahqfABlADF6CO4dGoKj6tXvY6K%2BTWC4tpwP9UtoF4BZwrGO9xAnPOt0xDWwSEsArDVqVbapJWf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a28a429a7d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50316,"size_decoded":51058,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-07-13T12:48:05.456163Z","times_seen":22402,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"kyberswaps-apps.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"dre-remout.pro/","fqdn":"dre-remout.pro","domain":"dre-remout.pro","tld":"pro"},"ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:01.520Z","timestamp":1783885441520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dre-remout.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 08:08:28 GMT","end":"Tue, 29 Sep 2026 09:07:00 GMT"},"fingerprint":{"sha1":"7D:3F:8E:9C:F0:9E:98:13:34:1D:E0:B9:72:53:50:5C:D9:CF:44:19","sha256":"63:68:69:F0:3B:9D:00:56:CC:64:4B:89:36:BA:98:BC:60:9C:3A:58:17:5E:00:0E:8E:C5:E6:A7:74:CA:F0:95"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: dre-remout.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kyberswaps-apps.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1497\r\nOrigin: https://kyberswaps-apps.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1497,"data":"v=20012026\u0026s=1\u0026r=203c0f2d1c7617352777712c0a2c0f3c1f1d173c241213771f137c351f060c360c28173327120335272c0c730c2831701c28133c2676212d260d08311c1d0732263c70332628262c09060f7627760f371f1d0f232412142c0a287074270232360c2b133f1f1d0f232412142c0a287074270232360c28742926760b2d1f771323210d082c0a2f00760a0108710a0110750b010074081110360c280b2a1c1d17231f0203751c160c73203c0f29272b172926297c761f120f3f241d17290c2f2a2c0c2c322c2702132d212813232177132c267729751f160c730c2c0c360c280b33272870291c7617232676132f1c77133f263c0c730c2c75740b112e71082f0c770a1108700c2c322c1c777c302728132f21037c3c1f1d03741f1d0b750c2f2a2c0c2c322c1c777c302728132f21037c2f1c12702f1f12322c0a2c0c2c09060f2d260d073c27761f291d760f29261d13292676142c0a2c0c2c09060f2d260d073c27761f291d760b741c770b292676082c0a2c0c310b1110700a010c3c0b2f2e3f0a160c360c280332260d0f33212813231c7703301c7713360c2f2a2c0c2c322c2602133c271229751d760b351f7770231f0203751c160c730c2c0c360c2b173c1c12703f1f28133c1d760f29261d13292676142c0a2c0c2c09060f752628033026771f2926297c3f21120b2f1f1d0b3f0c2f2a2c0c2c322c210d0f2d272b0b281f1d0f231c7703301c7713360c2f2a2c0c2c322c2677292b27297c3c1f1d03741f1d0b750c2f2a2c0c2c322c2677292b27297c3f21120b2f1f1d0b3f0c2f2a2c0c2c322c2677292b27297c2f1c12702f1f12322c0a2c0c2c09060f2f2402033527297c3c1f1d03741f1d0b750c2f2a2c0c2c322c1c772d2d241270232676132f1c77133f263c0c730c2c0c360c280b2a1c1229301d770b2d27280b2927060c730c2c0f7c09060f761c123d361f1d17231c12172e2628133f263c0c73272b13362706322c2602033c2102702926297c2d1f02173c1f1d0b3f0c2f35281c123d3f1f1d7578"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"48-C/vz0i9hzubphvVyyUsJdJNdeAI\"\r\ndate: Sun, 12 Jul 2026 19:44:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4M1BE3S8GFXkXsUXGOblKZW7J12lYO4V0%2F8fUXjcEPgyHdPbbtiY8TfKHWZcWnRCmQFIjtHfRWexo2ymeS34r2nNYS0HYYppK7XFCehxljUppKGYUHjSICFLJp02d%2FEtQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a28a4add374c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":72,"size_decoded":770,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2d9dbc06854944bc30ec537478de8cbc","sha1":"0bfbf3d22f61cee6e986f572c94b0974935d7802","sha256":"f9decdeb9066f165367b64d041ef08143214038ba6526e021e3c0bfabe51f117","sha512":"00560b35386bdb5d2b4c2dfc6ec54e0a473716d76d1bfd7128418f79ce966eb0c09b6691f46c838debf90b51d1d4cd1d0919722a1287a1170fd352610f61ba27","ssdeep":"","tlshash":"90a00286f0e72578210e4c36bdcad739055066b410dc4e546b4512126ea2f4adfb9077","first_seen":"2026-07-12T19:44:42.673487Z","last_seen":"2026-07-12T19:44:42.673487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":111,"dns":0,"connect":73,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dre-remout.pro/","fqdn":"dre-remout.pro","domain":"dre-remout.pro","tld":"pro"},"ip":{"addr":"172.67.217.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kyberswaps-apps.org/swap.htm","date":"2026-07-12T19:44:01.878Z","timestamp":1783885441878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dre-remout.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 08:08:28 GMT","end":"Tue, 29 Sep 2026 09:07:00 GMT"},"fingerprint":{"sha1":"7D:3F:8E:9C:F0:9E:98:13:34:1D:E0:B9:72:53:50:5C:D9:CF:44:19","sha256":"63:68:69:F0:3B:9D:00:56:CC:64:4B:89:36:BA:98:BC:60:9C:3A:58:17:5E:00:0E:8E:C5:E6:A7:74:CA:F0:95"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: dre-remout.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kyberswaps-apps.org/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1513\r\nOrigin: https://kyberswaps-apps.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1513,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"bfd8-jhyM6qIkUVuzxxEZ3VdLYr1Y7Zo\"\r\ndate: Sun, 12 Jul 2026 19:44:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNCAGo9tjN%2FoGbSysRul%2FqtSK3mfN8ISIeljJPAGCZ0VeDtVFcZ5%2FxDLxlgahj2iYTls%2FBLHPcefIRlce7k9WKaVO5xR%2BF6pmKNbF%2FERFRvIl6QDU4elSaxqVrg6hFWMsw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a28a4bcd6b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":49112,"size_decoded":12913,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (49112), with no line terminators","md5":"cfc1cf8be3749f60d03779a10b54c4c0","sha1":"8e1c8ceaa224515bb3c71119dd574b62bd58ed9a","sha256":"6390a1af0857e7f1723254e0aa7c741f3c6aaddae1c61148380803c88453d97e","sha512":"105a4626b252dd71aa995d87fd0f3c9937879f6dfe08cea04bb301213753a4b5a0d385a8b75f227e1755b999b09915bafe20548ff0d5afa9fc061aeeb0143ca5","ssdeep":"768:GtrrhPuKtIfppCmUzZsjb1HSK7zWoaFWSOW8GHrAj:IrrhPuKtIfpwmUsFbzWoaFWS+GLq","tlshash":"a523ae70f99e68e42a4f897abb89f93f1b1345d4192fa53c0a1c054329e37d2cf950e6","first_seen":"2026-07-12T17:17:08.879958Z","last_seen":"2026-07-12T19:44:42.674471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}