{"report_id":"35992c3a-0d16-4927-a1d8-ffa78b3ae3cc","version":0,"status":"done","tags":[],"date":"2026-10-13T06:59:18Z","url":{"schema":"http","addr":"swanbitcoinreports.live/","fqdn":"swanbitcoinreports.live","domain":"swanbitcoinreports.live","tld":"live"},"ip":{"addr":"172.67.155.181","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"swanbitcoinreports.live/","fqdn":"swanbitcoinreports.live","domain":"swanbitcoinreports.live","tld":"live"},"title":"Swan Bitcoin | Crypto Tax Updates","dom":{"size":155107,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (59342)","md5":"08f9fe4dee6707d7f08f0328e70605d7","sha1":"a5326e3b599c5c608e4e7c1919aa3671b28501c6","sha256":"ed0be7481e3296cad0bfd600c10521ea1373f9349082727f835b9fa9f7c7b2ad","sha512":"c76aeb03ee46da818da721107680f2cf5fc5fabe4204757725f1d4285e3a2df4d6efc5c3fdd8ea0967e0cd20106fd6f564c91b42fa7f2f008f3918d5856f5905","ssdeep":"3072:QXCPBgF5THDaAurtz4hmEdHjXCPBgF5THDaAurtz4hmEdHyGK:5BO5TjhhndHKBO5TjhhndHvK","tlshash":"40e31263879e19d650b383e9f6e1a309ac81f1c35144da6d35cd00868f86d88b677fdb","dom_hash":"domhash513cf6b9f53efa1b610e18006bf5f977","first_seen":"2026-10-13T06:16:40.616835Z","last_seen":"2026-10-13T06:59:18.953435Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"swanbitcoinreports.live/","fqdn":"swanbitcoinreports.live","domain":"swanbitcoinreports.live","tld":"live"},"ip":{"addr":"172.67.155.181","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T06:59:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"swanbitcoinreports.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"www.swanbitcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"swanbitcoinreports.live","ip":{"addr":"172.67.155.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-13T06:16:35.911749Z","last_seen":"2026-10-13T06:16:35.911749Z","alert_count":1,"request_count":1,"received_data":155995,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.swanbitcoin.com","ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2019-12-12","domain_rank":0,"first_seen":"2020-01-24T16:49:27Z","last_seen":"2026-10-13T06:16:36.569414Z","alert_count":1,"request_count":1,"received_data":1937,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"swanbitcoinreports.live/","fqdn":"swanbitcoinreports.live","domain":"swanbitcoinreports.live","tld":"live"},"ip":{"addr":"172.67.155.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c5dca0f3cd331301eb1d6206e6d2e7a","sha1":"815410394e6a8305f72fb413e1b464a2501ec68a","sha256":"447c7b964707c0079dc212fbbb421d2ded46a3448cb751d506d70ae05fb7c85b","sha512":"4a080e8d4f5497e030a6c51aad5f13b336e31e8fcb226ea93479e326d5c70d6408898816ad63a2d15c095601db9b2d9d16ba789bf604584ef86c191732ee5aaa","ssdeep":"","tlshash":"c301fdafaa831063027b3db5798ea5043933806b0895cc07b96c8b88ef509220367dec","size":810,"data":"","first_seen":"2026-10-13T06:16:40.621051Z","last_seen":"2026-10-13T06:59:18.959671Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"swanbitcoinreports.live/","fqdn":"swanbitcoinreports.live","domain":"swanbitcoinreports.live","tld":"live"},"ip":{"addr":"172.67.155.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T06:58:47.094Z","timestamp":1791874727094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swanbitcoinreports.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 15:50:51 GMT","end":"Sun, 03 Jan 2027 15:50:50 GMT"},"fingerprint":{"sha1":"0B:C6:53:A1:82:AA:8F:66:14:25:CE:D7:3C:AA:FF:0C:02:DC:CA:34","sha256":"11:E4:F1:B6:9E:74:BC:BD:4A:87:6A:72:A1:4F:E4:3D:EB:CD:92:84:FA:69:4C:6A:9D:8F:50:1A:63:79:25:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: swanbitcoinreports.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:58:47 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 05 Oct 2026 10:10:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EscLWBcZ0niVaKSnkfvfwq%2B66efmLT0zu7pds%2BUw1fwn4YHIn0bHPKw7BjoH%2BxaTeG5Lb8Otl4HBsDVJflLpjVVO7R42XTJW1MoSmDrHpR9Un8UwdK4%2BvyfFrTkwKA4ESFu8yrz7lI4UQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49c75348bc75688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155124,"size_decoded":64057,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (59325)","md5":"5a134a6b5d579a4fe5ae5cf6001accb3","sha1":"5e6d2efabb6ab6ce96dad0161dd30c8eee789446","sha256":"b39c0ad3868ca9b6d0bfdfe25a74c98ba22a98e0fb056cb4fea7db40363eafe0","sha512":"7c2f8c91386a502c17e6b794571b9a45a7c19584adc17a5dcb210fdac47f996d287d49f142bfbc2a5a78a854bd29c5539a845bc0651bb0257cbce2bf28f10368","ssdeep":"3072:+XCPBgF5THDaAurtz4hmEdHjXCPBgF5THDaAurtz4hmEdHyGS:TBO5TjhhndHKBO5TjhhndHvS","tlshash":"fbe31263879e19d650b383e9f6e1a309ac81f1c35144da6d35cd00868f86d88b677fdb","first_seen":"2026-10-13T06:16:40.618522Z","last_seen":"2026-10-13T06:59:18.955138Z","times_seen":4,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":4,"connect":23,"send":0,"wait":223,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"swanbitcoinreports.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.swanbitcoin.com/favicon-32x32.png","fqdn":"www.swanbitcoin.com","domain":"swanbitcoin.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://swanbitcoinreports.live/","date":"2026-10-13T06:58:47.870Z","timestamp":1791874727870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swanbitcoin.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:03:42 GMT","end":"Sat, 31 Oct 2026 07:03:41 GMT"},"fingerprint":{"sha1":"80:DC:8B:09:F6:C1:16:F9:47:58:CF:A2:FF:85:7A:9A:93:A5:67:89","sha256":"9E:10:7B:A6:14:0D:E2:48:E8:CD:BE:01:2F:FB:CA:46:6D:1B:98:3F:F9:23:B4:2E:29:85:BD:56:88:FE:33:1A"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: www.swanbitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://swanbitcoinreports.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: image/png\r\ndate: Tue, 13 Oct 2026 06:58:48 GMT\r\netag: \"40b4dd60ec157ef7d091221ffb73fef7-ssl\"\r\nreferrer-policy: same-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M4T0X02C3PK6S4MXNCXWPRPR\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 1353\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1353,"size_decoded":1937,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"82c850f25de259637d31d92154cb3a1b","sha1":"c5d7984f991c5d977c3746fa9ef00994cf45f51c","sha256":"a557e2e091d1f409471fb453d1a9e3e39b8b7552e61d458df85be7719f338a01","sha512":"09ced093a728771a675273be3d5d5fd25c9f9289d0c7d70dc62d965886b8608a7a6a5bd5ccd2eb6dfb856807106ce6b6648d9aa2d259dbfa84b433a1476a45ec","ssdeep":"","tlshash":"a521d846db202cf98c983f07580ad6c5347bf96d9005bfb4c836b49e7d216ed5604b2b","first_seen":"2026-10-13T06:16:40.619796Z","last_seen":"2026-10-13T06:59:18.958126Z","times_seen":4,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":84,"connect":59,"send":0,"wait":280,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"www.swanbitcoin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}